Re: IAS server stops authenticating workstations and users



OK, so that probably is not the problem. :-)

Have you tested communication between the IAS server and the RADIUS clients
to ensure that all links are up? Also wondering if you have viewed the IAS
log file -- is IAS receiving Access-Request messages from RADIUS clients?
If so, what error/reason codes are you getting in Event Viewer?

Have you verified the configuration of the RADIUS clients both in IAS and
at the client itself -- for example, are you certain that the shared
secrets all match?

Just some ideas to assist you in troubleshooting, though you may have tried
some or all of this. If you have inspected all of these things and have not
found a cause, you probably need to call Customer Support Services to
resolve the issue.

=?Utf-8?B?R0hM?= <GHL@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:0EB79B8C-C6DD-4F49-8BA1-5A9FC28B88F3@xxxxxxxxxxxxx:

Hi James,
I have 98 gig free on the hard disk.
G.L.

"James McIllece [MS]" wrote:

=?Utf-8?B?R0hM?= <GHL@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:E00AFC94-72C3-49BB-8C0D-9630A9FBC5A4@xxxxxxxxxxxxx:

I have a Windows 2003 R2 server that was running fine and doing its
job authenticating workstations and users for 2 months. Last week
the authentication process promptly stopped, the service was still
running. The IAS server stopped logging. Messages on the Cisco AP
said "cannot authenticate workstation". I installed a second IAS
server and the authentication process has resumed. What I would
like to know is, why the first IAS server stopped authenticating in
the first place ?? Is there some kind of cache on a Radius server
that has to be emptied or is it the log file that gets to full and
the server fails to respond to the demands from the client ?? Was
it because of a Windows update ?? If anyone has an idea an answer
would be appreciated. If more info is needed on my setup just let
me know .. thanks


IAS stops processing authentication requests when there is not enough
space on the hard drive to write to the log file. That's probably
what happened, and it will happen again on the second IAS server if
logging is not configured properly and/or you run out of hard drive
space.

*************
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online
account name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no
rights.



.



Relevant Pages

  • Re: enterprise RADIUS
    ... There is no hardcoded limit on RADIUS clients. ... > secondary radius server. ... IAS uses AD for user accounts and AD groups. ... >>> authentication of wireless/VPN/Dial infrastructure. ...
    (microsoft.public.internet.radius)
  • Re: EAP-TLS Radius problem
    ... Do I understand you correctly that with IAS it is not possible to ... domain that the IAS server is in? ... server that is a member of Domain 1. ... Domain1 runs a Radius server to do authentication for wired 802.1x. ...
    (microsoft.public.internet.radius)
  • Re: IAS and workgroup computers.
    ... guess is that the because PEAP authentication fails, the IAS server does not ... IAS can return three responds to authentication equests: ... In this case IAS drops the request, but I would like it to reject it. ...
    (microsoft.public.windows.server.networking)
  • Re: IAS and workgroup computers.
    ... guess is that the because PEAP authentication fails, the IAS server does ... IAS can return three responds to authentication equests: ... In this case IAS drops the request, but I would like it to reject it. ...
    (microsoft.public.windows.server.networking)
  • Re: IAS gurus?
    ... First, it's ISA not IAS. ... ability to log users' internet access. ... > to send authentication requests to a Radius server. ... > an IAS server & proxy Internet usage from there. ...
    (microsoft.public.security)

Loading