NAP in PEAP Vista failures
Hi,
I am trying setup a Vista client and a Longhorn server to do NAP health checking in PEAP authentication.
In my CRP I have overdridden RAP authentication, enabled peap and
enabled quarantine checks. If in the client, I uncheck enable
quarantine checks in the PEAP settings and authenticate, it completes
successully albeit in the IASNAP.txt log file I see the warning
[3540] 11-15 16:12:28:215: WARNING: No SHV Session Handle
On my client EAP QEC is enabled, NAP Agent service is running,
and Windows Security Center is turned ON. If I enable qurantine check
in the PEAP setting in the client, the authentication fails and this is
what I see in the IASSAM.txt
3540] 11-15 16:21:08:843: Successfully validated windows account DEMO\bob.
[3540] 11-15 16:21:08:843: Successfully validate PEAP inner identity
[3540] 11-15 16:21:08:843: Processing output from EAP: action:1
[3540] 11-15 16:21:08:843: Inserting outbound EAP-Message of length 59.
[3540] 11-15 16:21:08:843: Issuing Access-Challenge.
[3540] 11-15 16:21:08:843: No AUTHORIZATION extensions, continuing
[2516] 11-15 16:21:08:875: Successfully retrieved session for user DEMO\bob.
[2516] 11-15 16:21:08:875: Processing output from EAP: action:3
[2516] 11-15 16:21:08:875: Processing PEAP TLVs
[2516] 11-15 16:21:08:875: EAP-TLVs are not expected.
[2516] 11-15 16:21:08:875: Caught unknown exception
[2516] 11-15 16:21:08:875: No AUTHENTICATION extensions, continuing
[2516] 11-15 16:21:08:875: No AUTHORIZATION extensions, continuing
[3540] 11-15 16:21:14:172: Session timed out
[3540] 11-15 16:21:14:172: Caught unknown exception
[3540] 11-15 16:21:14:172: No AUTHENTICATION extensions, continuing
[3540] 11-15 16:21:14:172: No AUTHORIZATION extensions, continuing
[2516] 11-15 16:21:19:922: Session timed out
what could I be doing wrong ?
Thanks
- Rajesh.
November 15th, 2006 2:08pm
wanted to add that the Longhorn version is Build 5384
Free Windows Admin Tool Kit Click here and download it now
November 15th, 2006 3:20pm
to close the loop .. everything works fine with Longhorn build 5600
November 20th, 2006 9:20am