squid radius auth got a problem with IAS ( windows server 2003 )

joker20 · 04-21-2012, 03:07 PM

interesting

i actually had to pull some old configs to refresh my memory on what i thought was needed...

aaa group server radius radgroup
server *address* auth-port 1645 acct-port 1646
aaa authentication login default local
aaa authentication login userauth local group radius
aaa authorization network GROUPAUTHOR local group radius
radius-server host *address* auth-port 1645 acct-port 1646 key 7 **HIDDEN KEY**

acid_kewpie · 04-21-2012, 03:11 PM

well the client side config should be fine, as it's to AD, I'd wonder initially about username format, but past that it's the subtleties of IAS's policy really, and there aren't that many subtitles to work with.

hoanghn2908 · 04-22-2012, 12:50 AM

thanks for your answers . i did everything but it still doesn't work. do you think because of the different authentication mechanisms between Linux ( squid proxy ) and Windows ( IAS ), they can't talk to each other.

acid_kewpie · 04-22-2012, 06:46 AM

No, of course that's not relevant. they are a radius client talking to a radius server, they aren't allowed to not work together.

we've given you suggestions that you've not acted upon yet. Clearly you've not done it all right, or it would be working. is there anything else in the failure event log?

hoanghn2908 · 04-22-2012, 07:06 AM

Quote:

Originally Posted by acid_kewpie

No, of course that's not relevant. they are a radius client talking to a radius server, they aren't allowed to not work together.

we've given you suggestions that you've not acted upon yet. Clearly you've not done it all right, or it would be working. is there anything else in the failure event log?

no, that all in the windows 2k3's event log. are they have any same type authentication? Look at the the tab Access Policy in 2K3, i see MS Chap v2, MS Chap, Pap & SPAP.

acid_kewpie · 04-22-2012, 09:27 AM

what did it say at the bottom of the failure event when you scroll down the event in event viewer?