topic Authentication Active Directory is failing in Network Security

Authentication Active Directory is failing

eadell — Fri, 21 Feb 2020 07:37:26 GMT

I have the following scenario.

I have a VPN 3005 concentrator with AUTHENTICATION against AD .

The VPN 3005 and AD are in the same LAN.

I can access with WebVPN but with MS-VPN Client(w2k professional/xp) we can´t. In this case the log of VPN show always the same entries:

2157 09/10/2004 13:19:42.290 SEV=3 AUTH/5 RPT=141 150.128.190.76 Authentication rejected: Reason = Invalid passwordhandle = 200, server = (none), user = my_user, domain = MYDOMAIN

In PPTP properties of 'base group' in VPN concentrator

PPTP Authentication Protocols

If i check only the PAP protocol, the authentication user's work but any other combinations of protocols doesn't work.

In PPTP properties of MS-VPN any combination of authentication protocol have the same results.

Can anybody help me on this?

Thanks

Re: Authentication Active Directory is failing

amritpatek — Thu, 16 Sep 2004 13:36:05 GMT

Looks like you are facing the bug CSCdy18833. Check out the following for more information:

Authentication Failures When ACS/NT 3.0 Is Authenticating to Active Directory

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00800b1583.shtml

Re: Authentication Active Directory is failing

mhs — Thu, 10 Feb 2005 16:32:33 GMT

I have the same hardware and the same problem. Have you ever received a fix or way to configure this? If you have something please let me know, that would be a great help.

Paul

Re: Authentication Active Directory is failing

bljibm — Wed, 27 Apr 2005 06:49:44 GMT

I have a similar issue, we have users coming in on a remote VPN, authenticating with MS-CHAP/CHAP only against a RADIUS which queries an AD server.

Because we specify using MS-CHAP/CHAP for authentication we do not appear able to get webVPN users to authenticate, as I understand the VPN Concentrator uses PAP to pass password authentication details.

If any one knows how we can get the Concentrator to send webVPN passwords details in CHAP it would be appreciated.

thanks

Re: Authentication Active Directory is failing

tyoungbauer — Mon, 06 Jun 2005 23:04:17 GMT

Have you had any luck with this? I am having the same issue and I cannot find a solution.

Thanks

Todd