10-16-04 02:25 AM
Looks like you have a major configuration issues
Please refer to http://www.microsoft.com/wifi and follow the steps on how to
setup your IAS server
--
========================================
=====
This posting is provided "AS IS" with no warranties, and confers no
rights.
========================================
=====
"barry" <bmercer@bnota.tk.com> wrote in message
news:416e3a9e$1@news.star.co.uk...
> Hello,
>
> Attempting to configure 802.1x with IAS running on 2000. It seems to work
> on the one 2000 Laptop we have (well, it gets an IP), but none of the XP
> ones want to get one, and just end up with apipa addresses. Heres the Log
> from IASSAM.log. I've tried various authentication methods and protocls,
> and they all seem to do the following. The one below is using
> certificates. I'am assuming after "Issuing Access-Challenge." somtheing
> else should happen? It seems to wait 30 seconds and then repeat.
>
>
> [7944] 10:10:52:521: NT-SAM Names handler received request with user
> identity domain\user
> [7944] 10:10:52:521: Username is already an NT4 account name.
> [7944] 10:10:52:521: SAM-Account-Name is "DOMAIN\userr".
> [7944] 10:10:52:521: NT-SAM Authentication handler received request fo
r
> DOMAIN\user.
> [7944] 10:10:52:521: No SAM credentials found. Checking account
> restrictions and computing groups manually.
> [7944] 10:10:52:521: Sending LDAP search to domain.co.uk.
> [7944] 10:10:52:521: Successfully processed account.
> [7944] 10:10:52:521: NT-SAM User Authorization handler received reques
t
> for DOMAIN\user.
> [7944] 10:10:52:521: Using downlevel dial-in parameters.
> [7944] 10:10:52:521: Sending LDAP search to domain.co.uk.
> [7944] 10:10:52:521: Inserting attribute msNPAllowDialin.
> [7944] 10:10:52:521: Successfully retrieved per-user attributes.
> [7944] 10:10:52:521: NT-SAM EAP handler received request.
> [7944] 10:10:52:521: No State attribute present. Creating new session.
> [7944] 10:10:52:521: Successfully created new session for user
> DOMAIN\user.
> [7944] 10:10:52:521: Setting max. packet length to 1376.
> [7944] 10:10:52:521: Processing output from EAP DLL.
> [7944] 10:10:52:521: Inserting outbound EAP-Message of length 6.
> [7944] 10:10:52:521: Issuing Access-Challenge.
> [My gap]
> [7224] 10:11:22:521: NT-SAM Names handler received request with user
> identity domain\user.
> [7224] 10:11:22:521: Username is already an NT4 account name.
> [7224] 10:11:22:521: SAM-Account-Name is "DOMAIN\user".
> [7224] 10:11:22:521: NT-SAM Authentication handler received request fo
r
> DOMAIN\user.
> [7224] 10:11:22:521: No SAM credentials found. Checking account
> restrictions and computing groups manually.
> [7224] 10:11:22:521: Sending LDAP search to domain.co.uk.
> [7224] 10:11:22:521: Successfully processed account.
> [7224] 10:11:22:521: NT-SAM User Authorization handler received reques
t
> for DOMAIN\user.
> [7224] 10:11:22:521: Using downlevel dial-in parameters.
> [7224] 10:11:22:521: Sending LDAP search to domain.co.uk.
> [7224] 10:11:22:521: Inserting attribute msNPAllowDialin.
> [7224] 10:11:22:521: Successfully retrieved per-user attributes.
> [7224] 10:11:22:521: NT-SAM EAP handler received request.
> [7224] 10:11:22:521: No State attribute present. Creating new session.
> [7224] 10:11:22:521: Successfully created new session for user
> DOMAIN\user.
> [7224] 10:11:22:521: Setting max. packet length to 1376.
> [7224] 10:11:22:521: Processing output from EAP DLL.
> [7224] 10:11:22:521: Inserting outbound EAP-Message of length 6.
> [7224] 10:11:22:521: Issuing Access-Challenge.
>
> Thanks for any help / tips!
>
> Barry
>
[ Post a follow-up to this message ]
| 
Weirdly it did work, then stopped (as things
often do)... so I don't know if someone has been messing. Not important.
Trash and try again then 
