IAS Authentication Error
Hi Everyone,
The other day all wireless clients stopped being able to authenticate with the IAS server.
The message in the event logger is:
User CWLNT\cumminr was denied access.
Fully-Qualified-User-Name = charleswells.co.uk/.Wells & Youngs/Users/cumminr
NAS-IP-Address = 10.200.100.2
NAS-Identifier = WLC1
Called-Station-Identifier = 00-0B-85-71-B0-00:Charles Wells WLAN
Calling-Station-Identifier = 00-13-CE-37-6F-E6
Client-Friendly-Name = Brewery Cisco Wireless LAN Controller
Client-IP-Address = 10.200.100.2
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 1
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = Wireless Domain Users
Authentication-Type = PEAP
EAP-Type = <undetermined>
Reason-Code = 262
Reason = The supplied message is incomplete. The signature was not verified.
For more information, see Help and Support Center at
The cerficates are auto enrolled using Group Policy.Have tried a manual enrollment of a client certifcate to no avail.
Any help would be appreciated.
Regards
Kev
Answers
Could you supply us with some more info on the setup such as your version of Windows Server 2008? has this worked without problems and then all in a sudden just stopped working for all your users?
You could start by checking validity of your Certificates, both server and clients, making sure nothing has expired.
Brjann
All Replies
Could you supply us with some more info on the setup such as your version of Windows Server 2008? has this worked without problems and then all in a sudden just stopped working for all your users?
You could start by checking validity of your Certificates, both server and clients, making sure nothing has expired.
Brjann
- Hi,Did you get anywhere with this. I have a lot of clients that suddenly stopped authenticating to an IAS 2003 server over the weekend. I cant work out why but I get the same error. I saw this Microsoft Support article http://support.microsoft.com/default.aspx/kb/838502 but i cannot walk round every laptop and get a network cable attached to download the certificate that was working perfectly 3 days ago. I hope someone somewhere can help.
Turned out that the intermediaet certificate from Verisign had fallen out of the server for some reason. Downloaded a new one from thr Verisgn website installed and everything came back to life.
- Proposed As Answer byprosperosbks Tuesday, November 03, 2009 9:17 AM

