Ask a questionAsk a question
 

AnswerIAS Authentication Error

  • Tuesday, August 07, 2007 8:58 AMkevinhobson2000 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

     

    Hi Everyone,

     

    The other day all wireless clients stopped being able to authenticate with the IAS server.

     

    The message in the event logger is:

     

    User CWLNT\cumminr was denied access.

    Fully-Qualified-User-Name = charleswells.co.uk/.Wells & Youngs/Users/cumminr

    NAS-IP-Address = 10.200.100.2

    NAS-Identifier = WLC1

    Called-Station-Identifier = 00-0B-85-71-B0-00:Charles Wells WLAN

    Calling-Station-Identifier = 00-13-CE-37-6F-E6

    Client-Friendly-Name = Brewery Cisco Wireless LAN Controller

    Client-IP-Address = 10.200.100.2

    NAS-Port-Type = Wireless - IEEE 802.11

    NAS-Port = 1

    Proxy-Policy-Name = Use Windows authentication for all users

    Authentication-Provider = Windows

    Authentication-Server = <undetermined>

    Policy-Name = Wireless Domain Users

    Authentication-Type = PEAP

    EAP-Type = <undetermined>

    Reason-Code = 262

    Reason = The supplied message is incomplete. The signature was not verified.

    For more information, see Help and Support Center at

     

    The cerficates are auto enrolled using Group Policy.

     

    Have tried a manual enrollment of a client certifcate to no avail.

     

    Any help would be appreciated.

     

    Regards

     

    Kev

Answers

  • Saturday, August 11, 2007 10:31 AMBrjann BrekkanMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Could you supply us with some more info on the setup such as your version of Windows Server 2008? has this worked without problems and then all in a sudden just stopped working for all your users?

     

    You could start by checking validity of your Certificates, both server and clients, making sure nothing has expired.

     

    Brjann

All Replies

  • Saturday, August 11, 2007 10:31 AMBrjann BrekkanMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Could you supply us with some more info on the setup such as your version of Windows Server 2008? has this worked without problems and then all in a sudden just stopped working for all your users?

     

    You could start by checking validity of your Certificates, both server and clients, making sure nothing has expired.

     

    Brjann

  • Tuesday, May 19, 2009 6:07 PMprosperosbks Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    Did you get anywhere with this. I have a lot of clients that suddenly stopped authenticating to an IAS 2003 server over the weekend. I cant work out why but I get the same error. I saw this Microsoft Support article http://support.microsoft.com/default.aspx/kb/838502 but i cannot walk round every laptop and get a network cable attached to download the certificate that was working perfectly 3 days ago. I hope someone somewhere can help.
  • Tuesday, November 03, 2009 9:17 AMprosperosbks Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer

    Turned out that the intermediaet certificate from Verisign had fallen out of the server for some reason. Downloaded a new one from thr Verisgn website installed and everything came back to life.

    • Proposed As Answer byprosperosbks Tuesday, November 03, 2009 9:17 AM
    •