RE: Internet Authentication Service Issues

Hi Loz,

Thanks for using the SBS newsgroup.

>From your description, I understand that you received error when tried to
open IAS server. If I am off base, please don't hesitate to let me know.

To resolve the problem, I suggest we use the rarepair to reinstall RRAS and
IAS:

1. Run the tool RArepair.exe to reinstall RAS components.

2. Restart the computer and reconfigure the RRAS and IAS server.

Note: I will attach the rarepair utility to you via email.

I would like to suggest you refer to the following KB articles to configure
RRAS and IAS server:

HOW TO: Turn On and Configure Inbound VPN Access in Small Business:
http://support.microsoft.com/?id=320697

HOW TO: Configure a Primary Internet Authentication Service Server on a
Domain Controller
http://support.microsoft.com/kb/317588/EN-US/

If the issue persists, please help me collect some information to isolate
the issue:

1. Please catch some screen shots when reproduced the issue.

To make a screen shot:
A. Press Alt + Pr Scrn to capture a screen shot.
B. From Start, go to Run, enter pbrush in the Open box, and then click OK.
C. Use Ctrl + V to paste the screen shot to the canvas.
D. From the File menu, go to Save and save as a JPG file.

2. Can you find any related error events in the Event Viewer? Please save
me the text of system and application log for further analysis:

To save a text copy of Application /System log:

A. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
Event Viewer.
B. Right-click on Application/System log and select "Save Log File As?".

Please add all files to a zip file and mail it to my working mailbox:
v-yanniw@xxxxxxxxxxxxx

Hope above information helps! I am happy to be assistance to you and look
forward to your reply!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

This step-by-step article describes how to correctly configure Routing and
Remote Access (RRAS) on Small Business Server (SBS) 2000 to accept incoming
VPN connections from remote workstations.

>From your description, my understanding on this issue is that after
upgrading the server from SBS 2000 to SBS 2003, IAS service cannot start
properly. If I have misunderstood anything, please feel free to let me know.

Based on my research, this issue could happen when IAS database was damaged
during the upgrade. Let's try the following suggestion:

(1). Go to %systemroot%\system32\ias folder. During upgrade IAS should have
created a file called iasnew.mdb.
(2). Rename ias.mdb to ias.mdb1
(3). Rename iasnew.mdb to ias.mdb
(4). Reboot the server and see if IAS service can start successfully now.

Please take your time to try the suggestions and let me know the result at
your earliest convenience. Your time and patience will be greatly



Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
From: "Loz" <lozzie16@xxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Subject: Internet Authentication Service Issues
Date: 4 Jan 2006 13:47:21 -0800

I am having problems with IAS on SBS 2000.

Whenever I open IAS the following errors occur (in this order):

Remote Access Policies Error - An error occurred while trying to make a
connection to the datastore.

Logging Error - An error occurred while trying to make a connection to
the datastore.

IAS Error - There was an error getting connection to the datastore.

Then once the errors are acknowledged right clicking on "Internet
Authentication Service (Local)" and selecting properties the following
error occurs:

IAS Error - Connection attempt failed.

I believe this may be the reason why I am unable to get Outlook Web
Access working (even though I have following the steps from Microsoft
for setting it up correctly) as well as VPN connections... all the
errors I receive in the RADIUS server and gateway machine indicate they
are waiting for a signature request. Even though I have configured
Access Policies, enabled and configured the RADIUS server and triple
checked the shared secret on all servers.

Any ideas or help much appreciated! :) Cheers!




--------------------
>From: "Loz" <lozzie16@xxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Internet Authentication Service Issues
>Date: 4 Jan 2006 13:47:21 -0800
>Organization: http://groups.google.com
>Lines: 28
>Message-ID: <1136411241.689203.131560@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 210.15.202.170
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1136411246 5798 127.0.0.1 (4 Jan 2006 21:47:26
GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Wed, 4 Jan 2006 21:47:26 +0000 (UTC)
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
..NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: o13g2000cwo.googlegroups.com; posting-host=210.15.202.170;
> posting-account=ZV7IWA0AAAALA5SoX2REzKHEwoiBjNDj
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
ews.com!postnews.google.com!o13g2000cwo.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:234126
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I am having problems with IAS on SBS 2000.
>
>Whenever I open IAS the following errors occur (in this order):
>
>Remote Access Policies Error - An error occurred while trying to make a
>connection to the datastore.
>
>Logging Error - An error occurred while trying to make a connection to
>the datastore.
>
>IAS Error - There was an error getting connection to the datastore.
>
>Then once the errors are acknowledged right clicking on "Internet
>Authentication Service (Local)" and selecting properties the following
>error occurs:
>
>IAS Error - Connection attempt failed.
>
>I believe this may be the reason why I am unable to get Outlook Web
>Access working (even though I have following the steps from Microsoft
>for setting it up correctly) as well as VPN connections... all the
>errors I receive in the RADIUS server and gateway machine indicate they
>are waiting for a signature request. Even though I have configured
>Access Policies, enabled and configured the RADIUS server and triple
>checked the shared secret on all servers.
>
>Any ideas or help much appreciated! :) Cheers!
>
>

.

Relevant Pages

  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... Access Policy, ... But I still wonder why it stops working if you stop IAS from ... IAS server in "New features for IAS" Can't remember how I got forwarded ... In the "connection request policies" The default policy there is fine but ...
    (microsoft.public.windows.server.sbs)
  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... IAS server in "New features for IAS" Can't remember how I got forwarded ... What I found was that the Remote Access Policy that we setup in IAS needs to ... In the "connection request policies" The default policy there is fine but ...
    (microsoft.public.windows.server.sbs)
  • Aironet 1200/MS Radius Help - Yet Again
    ... Your collective help thus far has made me understand more about wireless ... RADIUS/IAS Server. ... I also got a certificate from verisign to install on one of the two IAS ... there are communications between the client and access ...
    (microsoft.public.internet.radius)
  • RE: Internet Authentication Service Issues
    ... I think the problem should be caused by that the SBS 2000 server (IAS ... In SBS system there is no Trust will be available. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Redundant IAS servers
    ... > additional IAS servers as RADIUS clients to my central IAS ... > server but that is not the redundancy I'm after. ... central IAS server configuration to a file, ...
    (microsoft.public.internet.radius)
Loading