Thanks for the reply! After spending a few hours on the phone with MS Support this morning, we found what looks like a bug in the NPS logging. As far as I'm aware, we can still authenticate using either username format.Īny ideas here? I found this link which details the structure of the log fileīut what it doesn't do is give me any insight as to why the network policy isn't been matched by the mac-address logon attempt. There's nothing on the switch configuration that's adding this in, and I really can't see why it would make a difference in the authentication from a NPS side.
The only other things that I noticed here is when I use the fixed name, the logfile shows the connection attempt as the FQDN username ( ) but when I try to use the mac-address version, the logon attempt is formatted in a netbios (?) type name On the switch side, all I can see in the RADIUS debug is that the RADIUS server is rejecting the authentication attempt without any message. Which would lead me to believe it's the network policy, but I altered the policy to create a catch-all condition and I still wasn't able to get it to match. When I switch to the mac-address as username, I'm able to see it matches the connection policy, but not the network policy. In the log file, I'm able to see that the fixed username is succesfully able to use the connection policy and then the network policy ( it works!). I am able to see the request attempted in the NPS log file. When I change the switch config to instead use the mac-address as the username and password, I get nothing in the event viewer at all. I'm able to see the authentication request in the NPS event log in server manager and everything is great.
When I use the static username, I'm able to authenticate without any issues.
WINDOWS AUTHENTICATION ON MAC FOR PRINTING FORMAT PASSWORD
In the switch config, I'm able to define whether I use a static username for all mac-authentications, or whether I simply replace the username and password variables with the mac-address of the requesting network card. I've got a situation where I'm trying to get a switch ( 3Com 5500G) to authenticate to a NPS server for basic network access ( no dynamic vlan'ing or anything special ).
0 kommentar(er)
