RAS Server having problems authenticating users 1

[MattSavage]

Hi everyone.

I have a Windows 2003 Server running RRAS joined to a domain. I am trying to establish a dial-in connection and have RRAS authenticate the user by CHAP authentication. I have enabled reversibly encrypted passwords and allowed the user dial-in access.

There seems to be a problem authenticating to the PDC. In the IASSAM.LOG file, there are errors stating:

Opening LDAP connection to server.domain.local.
Access denied -- purging Kerberos ticket cache.
Retring LDAP connection to server.domain.local.
LDAP connect failed: Access is denied.
Using downlevel dial-in parameters.
Could not open an LDAP connection to domain DOMIAN.
NTDomain::getConnection failed: Access is denied.
Per-user attribute retrieval failed: Access is denied.

I have tried to dial-in the same way to the server when it is not joined to the domain, and that has been successful. I have no idea how to fix this. So I imagine that some type of setting in the active directory is causing this. Any ideas???

 

[iLinkTech]

Look into the Remote Access policy - may be what's going on...

http://www.microsoft.com/resources/...003/standard/proddocs/en-us/sag_rap_intro.asp

Hope this helps...

 

[MattSavage]

I added the RAS server to the list of RAS and IAS servers in the Active Directory group on our PDC. I also rejoined the domain, then logged into the RAS server using a domain login. It now works. I'm not exactly sure why, but i'm glad it does. Thanks for trying to help me out, ewallig.