| Bradley J. Schaufenbuel 2004-03-22, 6:35 pm |
| I currently authenticate all remote access users against my Active
Directory via the RADIUS protocol hitting an IAS server installed on
Windows 2000 AS. We are migrating all of our servers to Windows 2003
Server Standard Edition. I installed and configured IAS on a Windows
2003 Server in exactly the same manner as I had in Windows 2000. Both
servers are members of the same AD domain. RADIUS authentication
requests to the Windows 2000 IAS box succeed, but the same requests to
the Windows 2003 IAS server fail. A look at the Windows 2003 IAS
server's logs indicates the following error: "Authentication was not
successful because an unknown username or incorrect password was
used." The only difference between the two requests that I can see in
the logs is that the "Fully-Qualified-User-Name" attribute appears
differently. In the Windows 2000 log (which is working), it appears
as "subdomain.domain.com/Users/Joe User" and in the Windows 2003 log
(which is not working) it appears as "subdomain/joe.user". "Joe User"
corresponds to the name, displayName, and cn fields whereas "joe.user'
corresponds with the SamAccountName field. I suspect this has
something to do with my troubles. Any ideas?
Thanks,
Brad
|