Welcome to ISAserver.org

Radius Proxy and domains authentications

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Radius Proxy and domains authentications

Page: [1]

Message

<< Older Topic Newer Topic >>

Radius Proxy and domains authentications - 15.Mar.2008 4:17:07 AM

tomers@tomers.co.il

Posts: 25
Joined: 1.Nov.2006
Status: offline

Hi all.

I have ISA 2006 Server, Radius Proxy on IAS, Client's Radius on IAS with Active Directory. The client connects via VPN to the ISA server. The ISA goes to the Radius Proxy which sends the authenticatino request to the client's radius.
The client has to enter "domain\user" on the user connection. The Radius proxy looks on the domain portion of the user and sends it to the client's radius.
I have 2 problems:
1. I want the end user to enter a UPN instead of "domain\user". I was able to establish it on th radius but the problem is on the ISA. I can't set rules by that format. When I look in the ISA logs I can see it recognizes the user fine (it writes "user@domain.com" on the username portion of the log but none of the rules work. On the rule I add a username from Radius and write user@domain.com on the username. The isa just ignores it. If I use "domain\user" to authenticate and on the ISA User set I write it as "domain\user" it works.
2. A bigger problem: when I make a User set I can't (or don't know how) make a Domain Global user set. I mean: I want to make a radius user set like "domain\*" in order to include all the users in that domain automaticlly, but I can't find out how...

Any help in both pronlem would be appreciated. Thank you all.