Re: Radius question

From: deep (deep_at_discussions.microsoft.com)
Date: 10/05/04


Date: Tue, 5 Oct 2004 01:55:03 -0700

Hi Bill

 Thanks for reply.
as far as Licensing goes I am still not sure
If I read windows 2003 licensing at
http://www.microsoft.com/windowsserver2003/howtobuy/licensing/caloverview.mspx
"
 Note the following general exception to Windows CAL requirements: Windows
CALs are not required when access to the server software is unauthenticated
and conducted through the Internet. Authenticated access is defined as an
exchange of user or application credentials between the server software and a
user or device. An example of this exception would be if unidentified users
browsed your public Web site. Windows CALs would not be required for those
users"

ca u help me relating with my practical requirements

also, who all can be RADIUS clients to Microsoft RADIUS Server ?
is this to be checked at the RAS servers specific manuals or something else
we are having one clnet who will be provinding the dial up server equipment
Cisco
AS5350) , any idea on this?
what kind of scripting is required for all this any ideas will help ful.

ther are also looking for wither Radius server itself to authenticate OR
LDAP( that would mean ADS i think)
can RADIUS server work withoud ADS i mean a s a standalone server ( and
accounts can be created under local users and groups)?

Deep

"Bill Grant" wrote:

> IAS is Microsoft's implementation of a RADIUS server, and is compatible
> with RADIUS systems from other manufacturers. It is designed to allow you to
> authenticate against Active Directory if your remote access devices are not
> Microsoft systems. They can authenticate against your AD database using
> RADIUS. (Microsoft remote access devices can authenticate directly using
> Windows authentication to AD).
>
> Because it is industry compliant, I believe it can also work to other
> way (ie it can be a "client" to another RADIUS server).
>
> As far as I know, there is no requirement for CALs for remote access
> authentication.
>
> "deep" <deep@discussions.microsoft.com> wrote in message
> news:A4FB0B50-0609-4B40-9676-3A2909461FB4@microsoft.com...
> > is Radius or IAS synonym to each other?
> >
> > if not whats the broad diiference ?
> > i understand software wise RADIUS and ADS service ( win23 standard
> > edition
> > ,enterprise and data center)
> > if RADIUS and ADS service is part of w2003 licensing?
> > e.g if i want one win2k 3 server to be RADius Server then how will i
> > calcl;uate CAL/Licensing things.
> > also if I keep ADS(DC) server as sepearte the what will be overall model
> > for licensings?
> >
> > also If Radius u client is some third party product what all i will ahve
> > to
> > check with vendors Pls give any example if some one is using some third
> > pparty radius client.
> >
> >
> > another question , Is MS Radius server has to be member of Windows
> > Domain
> > controllers only ? OR is it possible if it can authenticate from other
> > LDAP
> > sources?
> > Pls help
> >
> > Regards
> > deep
> >
> >
>
>
>



Relevant Pages

  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... The do support WPA-EAP and the radius ... authenticate the computer and this is trying to authenticate the user and not ... If you can post perhaps 10 lines from the IAS log, ... represent my IAS server or the client laptops. ...
    (microsoft.public.windows.server.sbs)
  • Re: Native Mode possible problems...help!
    ... their password will still be able to logon to an NT 4.0 - but using their ... Windows 2003/2000/NT ... > They NT 4.0 domain controllers will still be able to authenticate users, ... > Why not just upgrade the BDCs to Windows 2000 Server? ...
    (microsoft.public.windows.server.general)
  • RE: NT to 2003 wierdness
    ... The following errors may occur in Windows NT when connecting to a Windows ... Server Manager: ... those user accounts in the servers group. ... NT will use the secure channel account password against to authenticate ...
    (microsoft.public.windows.server.migration)
  • IIS/ASP authentication with RADIUS
    ... Does anyone know if there is a way to let IIS users ... RADIUS is running on one of the Novell servers one of my ... server to authenticate against this client's ...
    (microsoft.public.inetserver.iis.security)
  • Re: Smartcard authentication in a multi-tier application
    ... side where the user enters the username and password and on the server ... implementation as we need the domain username and password of the PIN- ... since SC authentication on the Windows client results in a Kerberos ... ticket which can then be used to authenticate to the server. ...
    (microsoft.public.platformsdk.security)