FreeRadius going through ISA to reach federation

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Sat Dec 17 20:11:04 CET 2011


Hi,

>    In the debug logs, I have:Â
>    ad_recv: Access-Reject packet from host 10.10.66.18 port 1812, id=251,
>    length=24
>    Â Â Â ÂProxy-State = 0x3137

reject is reject - you need to check the logs of the IAS to see what it
thought it was doing (event viewer - IAS events) - you may also need
to ask the other end what they saw. a reject is usually a sign that things
got proxie but the other end didnt like it (incorrect password, user
not present, incorrect shared secrets which munged the packet.

>    Tried to see the IAS logs, they didn't much sense. Will have a look at
>    system events.

what do you mean by 'didnt make much sense' ? what do they say?

alan



More information about the Freeradius-Users mailing list