Welcome to ISAserver.org

Radius Authentication

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> Radius Authentication

Page: [1]

Message

<< Older Topic Newer Topic >>

Radius Authentication - 27.Jul.2004 12:15:00 PM

Wusu

Posts: 30
Joined: 2.Jul.2004
From: Odessa, Ukraine
Status: offline

Hello Guys,
I am having problem with authentication for web proxy client. My setup is as follows: I have an ISA server 2004 on a stand alone server. I configured it to use the RADIUS server on a domain controller. None of the workstation in the domain could authenticate through web proxy client. As if the login parameters were not correct. But on the other hand, VPN authentication through the RADIUS server is working perfectly for the all domain users. When i set the authentication type to basic or integrated on the ISA server, everything works fine. But i want to authenticate through RADIUS. What could i possibly have done wrong or haven't done? Please help.

Cheers
Eazzy

Post #: 1

Featured Links*

RE: Radius Authentication - 27.Jul.2004 1:16:00 PM

Wusu

Posts: 30
Joined: 2.Jul.2004
From: Odessa, Ukraine
Status: offline

Well Guys i did it! I found out that i had to allow PAP and SPAP in the dial-in profile of IAS remote access policy.

(in reply to Wusu)

Post #: 2

RE: Radius Authentication - 27.Jul.2004 4:28:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Eazzy,

You are absolutely right! I worked for several hours a couple of month ago working that one out. Its not documented anywhere! (but, it will be in the book) [Big Grin]

Thanks!
Tom

(in reply to Wusu)

Post #: 3

RE: Radius Authentication - 28.Jul.2004 11:25:00 AM

Wusu

Posts: 30
Joined: 2.Jul.2004
From: Odessa, Ukraine
Status: offline

Hi Tom,
I hope your book will soon be out. I'm sure it'll save me a lot of headache wondering what i've done or not done.
Cheers
Eazzy

(in reply to Wusu)

Post #: 4

RE: Radius Authentication - 29.Jul.2004 1:47:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Eazzy,

Thanks! Should be ready by October.

Thanks!
Tom

(in reply to Wusu)

Post #: 5

RE: Radius Authentication - 29.Jul.2004 11:10:00 AM

paulbaldwin

Posts: 139
Joined: 2.Apr.2004
From: Lancashire, UK
Status: offline

You only need PAP.

And you would do well to split you RAS policies to prevent your VPN clients getting away with PAP too.

Tom: it is documented! In the Event Log whenever a connection is attempted [Wink]

(in reply to Wusu)

Post #: 6

RE: Radius Authentication - 29.Jul.2004 12:47:00 PM

Wusu

Posts: 30
Joined: 2.Jul.2004
From: Odessa, Ukraine
Status: offline

Hi Guys!
I'll be looking forward to October then!
Thanks Paul for the information. As for splitting the RAS policies thats a very important point that could skip one's mind. I will definitely do that when i merge my servers. Right now the VPN server is on a different server with its own RAS policy.

Cheers
Eazzy

(in reply to Wusu)

Post #: 7

RE: Radius Authentication - 29.Jul.2004 1:12:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:
Originally posted by Paul Baldwin:
You only need PAP.

And you would do well to split you RAS policies to prevent your VPN clients getting away with PAP too.

Tom: it is documented! In the Event Log whenever a connection is attempted

Hi Paul,

Really? I don't recall the Event Log saying that PAP is the only supported protocol! I have to check that again.

Thanks!
Tom

(in reply to Wusu)

Post #: 8

RE: Radius Authentication - 17.Sep.2004 8:11:00 PM

Guest

In my event log, every authentication event gives me the following:

The description for Event ID ( 1 ) in Source ( IAS ) cannot be found. The local computer may not have the necessary registry information or message DLL files

I am pretty sure that a missing DLL is causing the problem, but can't figure out which one I need. Can anybody help me?

(in reply to Wusu)

Post #: 9

RE: Radius Authentication - 19.Sep.2004 9:27:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Danny,

OK, I went through the config and indeed you do need to enable PAP on the remote access policy in order to support RADIUS auth for Web Proxy clients.

HTH,
Tom

(in reply to Wusu)

Post #: 10