Quantcast
Channel: Network Access Protection forum
Viewing all articles
Browse latest Browse all 1875

RADIUS Authentication Problems with NPS Server Eventid 6274

$
0
0

Hi,

We have struggled for a while with RADIUS auth for some clients against an NPS Server when the user or computer tries to connect to the wireless network the following error can be seen on the NPS server:

Network Policy Server discarded the request for a user

Contact the Network Policy Server administrator for more information.

User:
    Security ID:            NULL SID
    Account Name:            host/hostname.domainname.com
    Account Domain:            -
    Fully Qualified Account Name:    -

Client Machine:
    Security ID:            NULL SID
    Account Name:            -
    Fully Qualified Account Name:    -
    OS-Version:            -
    Called Station Identifier:        40-20-B1-F4-BB-15:Wireless-SSID
    Calling Station Identifier:        C1-18-85-08-10-E1

NAS:
    NAS IPv4 Address:        192.168.10.10
    NAS IPv6 Address:        -
    NAS Identifier:            AP name
    NAS Port-Type:            Wireless - IEEE 802.11
    NAS Port:            0

RADIUS Client:
    Client Friendly Name:        name
    Client IP Address:            192.168.10.10

Authentication Details:
    Connection Request Policy Name:    Secure Wireless Connections
    Network Policy Name:        -
    Authentication Provider:        Windows
    Authentication Server:        NPS servername
    Authentication Type:        -
    EAP Type:            -
    Account Session Identifier:        -
    Reason Code:            3
    Reason:                The RADIUS Request message that Network Policy Server received from the network access server was malformed.

-----------------------------------------------------------------------------------------------------------------------------

Network Policy Server discarded the request for a user.

Contact the Network Policy Server administrator for more information.

User:
    Security ID:            NULL SID
    Account Name:            domainname\username
    Account Domain:            -
    Fully Qualified Account Name:    -

Client Machine:
    Security ID:            NULL SID
    Account Name:            -
    Fully Qualified Account Name:    -
    OS-Version:            -
    Called Station Identifier:        20-18-B1-F4-BB-15:Wireless-SSID
    Calling Station Identifier:        09-3E-8E-3E-5A-C9

NAS:
    NAS IPv4 Address:        192.168.10.10
    NAS IPv6 Address:        -
    NAS Identifier:            AP name
    NAS Port-Type:            Wireless - IEEE 802.11
    NAS Port:            0

RADIUS Client:
    Client Friendly Name:        name
    Client IP Address:            192.168.10.10

Authentication Details:
    Connection Request Policy Name:    Secure Wireless Connections
    Network Policy Name:        -
    Authentication Provider:        Windows
    Authentication Server:        NPS server name
    Authentication Type:        -
    EAP Type:            -
    Account Session Identifier:        -
    Reason Code:            3
    Reason:                The RADIUS Request message that Network Policy Server received from the network access server was malformed.

-----------------------------------------------------------------------------------------------------------------

Message seen from the AP's logs:

(317)IEEE802.1X auth is starting (at if=wifi0.2)

(318)Send message to RADIUS Server(192.168.60.166): code=1 (Access-Request) identifier=157 length=162,  User-Name=domain\username NAS-IP-Address=192.168.10.10 Called-Station-Id=40-18-B1-F4-BB-15:Wireless-SSID Calling-Station-Id=C0-18-85-08-10-E1

(319)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=157 length=90

 (320)Send message to RADIUS Server(192.168.60.166): code=1 (Access-Request) identifier=158 length=286,  User-Name=domain\username NAS-IP-Address=192.168.10.10 Called-Station-Id=40-18-B1-F4-BB-15:Wireless-SSID Calling-Station-Id=C0-18-85-08-10-E1

 (321)Send message to RADIUS Server(192.168.60.166): code=1 (Access-Request) identifier=161 length=162,  User-Name=domain\username NAS-IP-Address=192.168.10.10 Called-Station-Id=40-18-B1-F4-BB-15:Wireless-SSID Calling-Station-Id=C0-18-85-08-10-E1

 (322)Receive message from RADIUSServer: code=11 (Access-Challenge) identifier=161 length=90 BASIC  

Output omitted

(330)Sta(at if=wifi0.2) is de-authenticated because of notification of driver

We have other NPS Servers with corresponding policy settings which are working so I am having trouble to understand why this errors occurs.

Initally the problem seemed to be related to the Cert on the NPS server cause it used the cert generated from the Somputer template. Now it uses the template for Domain controller just as the other NPS servers so this should not be the issue(Not sure if this matters?)

Please guide me on how to take this further

Thank you :)

//Cris


Viewing all articles
Browse latest Browse all 1875

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>