Server 2008 NPS with wireless 802.1x authentication errors

Server 2008 NPS with wireless 802.1x authentication errors

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Server 2008 NPS with wireless 802.1x authentication errors Roostermiester 06-02-2008
Posted by =?Utf-8?B?Um9vc3Rlcm1pZXN0ZXI= on June 2, 2008, 5:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I've setup Server 2008 NPS (which is also functioning as a DC) to
authenticate wireless clients through a Cisco 2106 wireless lan controller.
The computer certs are auto installed through Group Policy. However, when it
attempts to authenticate I recieve the following error:

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 6/2/2008 12:24:38 PM
Event ID: 6273
Task Category: Network Policy Server
Level: Information
Keywords: Audit Failure
User: N/A
Computer: DC1.coaccess.com
Description:
Network Policy Server denied access to a user.

Contact the Network Policy Server administrator for more information.

User:
        Security ID:                        NULL SID
        Account Name:                        99C4R41.coaccess.com
        Account Domain:                        COACCESS
        Fully Qualified Account Name:        COACCESSC4R41.coaccess.com

Client Machine:
        Security ID:                        NULL SID
        Account Name:                        -
        Fully Qualified Account Name:        -
        OS-Version:                        -
        Called Station Identifier:                00-1F-CA-82-A1-80:coa
        Calling Station Identifier:                00-90-96-A3-E4-1F

NAS:
        NAS IPv4 Address:                10.10.230.6
        NAS IPv6 Address:                -
        NAS Identifier:                        COAWLC-2106
        NAS Port-Type:                        Wireless - IEEE 802.11
        NAS Port:                        1

RADIUS Client:
        Client Friendly Name:                COAWLC
        Client IP Address:                        10.10.230.6

Authentication Details:
        Proxy Policy Name:                Secure Wireless Connections Request
        Network Policy Name:                -
        Authentication Provider:                Windows
        Authentication Server:                DC1.coaccess.com
        Authentication Type:                EAP
        EAP Type:                        -
        Account Session Identifier:                -
        Reason Code:                        8
        Reason:                                The specified user account does not exist.

I haven't been able to come up with any good reason for the error. I do
recall having similar issues in a previous deployment and the solution was to
modify the computer name, but that has not worked in this case. Any ideas
what is causing this error?
Thanks

Posted by =?Utf-8?B?SmFtZXMgTWNJbGxlY2Ug on June 6, 2008, 1:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The NPS troubleshooting topic "Event ID 6273 — NPS Authentication Status"
might be of some assistance to you.

http://technet2.microsoft.com/WindowsServer2008/en/library/cafcb401-5e6e-4398-a571-efd93deb1eec1033.mspx

Also, just for future reference, the IAS/NPS Usenet newsgroup is
microsoft.public.internet.radius


"Roostermiester" wrote:

> I've setup Server 2008 NPS (which is also functioning as a DC) to
> authenticate wireless clients through a Cisco 2106 wireless lan controller.
> The computer certs are auto installed through Group Policy. However, when it
> attempts to authenticate I recieve the following error:
>
> Log Name: Security
> Source: Microsoft-Windows-Security-Auditing
> Date: 6/2/2008 12:24:38 PM
> Event ID: 6273
> Task Category: Network Policy Server
> Level: Information
> Keywords: Audit Failure
> User: N/A
> Computer: DC1.coaccess.com
> Description:
> Network Policy Server denied access to a user.
>
> Contact the Network Policy Server administrator for more information.
>
> User:
>         Security ID:                        NULL SID
>         Account Name:                        99C4R41.coaccess.com
>         Account Domain:                        COACCESS
>         Fully Qualified Account Name:        COACCESSC4R41.coaccess.com
>
> Client Machine:
>         Security ID:                        NULL SID
>         Account Name:                        -
>         Fully Qualified Account Name:        -
>         OS-Version:                        -
>         Called Station Identifier:                00-1F-CA-82-A1-80:coa
>         Calling Station Identifier:                00-90-96-A3-E4-1F
>
> NAS:
>         NAS IPv4 Address:                10.10.230.6
>         NAS IPv6 Address:                -
>         NAS Identifier:                        COAWLC-2106
>         NAS Port-Type:                        Wireless - IEEE 802.11
>         NAS Port:                        1
>
> RADIUS Client:
>         Client Friendly Name:                COAWLC
>         Client IP Address:                        10.10.230.6
>
> Authentication Details:
>         Proxy Policy Name:                Secure Wireless Connections Request
>         Network Policy Name:                -
>         Authentication Provider:                Windows
>         Authentication Server:                DC1.coaccess.com
>         Authentication Type:                EAP
>         EAP Type:                        -
>         Account Session Identifier:                -
>         Reason Code:                        8
>         Reason:                                The specified user account does not exist.
>
> I haven't been able to come up with any good reason for the error. I do
> recall having similar issues in a previous deployment and the solution was to
> modify the computer name, but that has not worked in this case. Any ideas
> what is causing this error?
> Thanks

Similar ThreadsPosted
Wireless authentication in SBS Server 2003 August 22, 2006, 11:19 am
802.1x Authentication over Wireless November 15, 2007, 2:05 pm
Windows Server 2008 CA April 2, 2008, 8:27 am
NAP Question in Server 2008 June 25, 2008, 3:36 pm
Server 2008 shutdown October 31, 2008, 8:58 am
RE: wireless authentication before logon May 26, 2005, 12:05 pm
Wireless Authentication Failures September 21, 2006, 4:48 pm
Event ID Errors 537 on Member Server May 29, 2007, 3:55 pm
Wireless authentication with AD & Cisco AIR-AP1231G-A-K9 March 3, 2008, 11:00 pm
KB938464 Update Fails on Windows Server 2008 October 3, 2008, 3:16 pm

The site map in XML format XML site map

Contact Us | Privacy Policy