IAS Authentication Error
Hi Everyone,
The other dayall wireless clients stopped being able to authenticate with the IAS server.
The message in the event logger is:
User CWLNT\cumminr was denied access.
Fully-Qualified-User-Name = charleswells.co.uk/.Wells & Youngs/Users/cumminr
NAS-IP-Address = 10.200.100.2
NAS-Identifier = WLC1
Called-Station-Identifier = 00-0B-85-71-B0-00:Charles Wells WLAN
Calling-Station-Identifier = 00-13-CE-37-6F-E6
Client-Friendly-Name = Brewery Cisco Wireless LAN Controller
Client-IP-Address = 10.200.100.2
NAS-Port-Type = Wireless - IEEE 802.11
NAS-Port = 1
Proxy-Policy-Name = Use Windows authentication for all users
Authentication-Provider = Windows
Authentication-Server = <undetermined>
Policy-Name = Wireless Domain Users
Authentication-Type = PEAP
EAP-Type = <undetermined>
Reason-Code = 262
Reason = The supplied message is incomplete. The signature was not verified.
For more information, see Help and Support Center at
The cerficates are auto enrolled using Group Policy.
Have tried a manual enrollment of a client certifcate to no avail.
Any help would be appreciated.
Regards
Kev
August 7th, 2007 11:58am
Could you supply us with some more info on the setup such asyour version of Windows Server 2008? has this worked without problems and then all in a sudden just stopped working for all your users?
You could start by checking validity of your Certificates, both server and clients, making sure nothing has expired.
Brjann
Free Windows Admin Tool Kit Click here and download it now
August 11th, 2007 1:31pm
Hi,
Did you get anywhere with this. I have a lot of clients that suddenly stopped authenticating to an IAS 2003 server over the weekend. I cant work out why but I get the same error. I saw this Microsoft Support articlehttp://support.microsoft.com/default.aspx/kb/838502but i cannot walk round every laptop and get a network cable attached to download the certificate that was working perfectly 3 days ago. I hope someone somewhere can help.
May 19th, 2009 9:07pm
Turned out that the intermediaet certificate from Verisign had fallen out of the server for some reason. Downloaded a new one from thr Verisgn website installed and everything came back to life.
Free Windows Admin Tool Kit Click here and download it now
November 3rd, 2009 12:17pm


