IAS Hangs When Configured as Radius Client for Windows 2000

• Microsoft Windows NT Server version 4.0 SP5
• Microsoft Internet Authentication Services for Remote Access Service version 1.0
• Microsoft Windows NT Server, Enterprise Edition version 4.0 SP5

SYMPTOMS

After you configure your computer running Microsoft Internet Authentification Service (IAS) 1.0 with the Radius/Proxy Server service as a client for a Windows 2000 Radius server, authentication requests may be denied and the Radius/Proxy Server service on the Windows NT 4.0 IAS server may stop responding (hang).

CAUSE

This behavior occurs because the Proxy Server service is not decrypting and encrypting MS-CHAP-MPPE keys correctly.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT 4.0. For additional information, please see the following article in the Microsoft Knowledge Base:

Q152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed this to be a problem in Windows NT 4.0. This problem was first corrected in Windows NT 4.0 Service Pack 6.

MORE INFORMATION

The user requesting authentication should be in the same domain as the Windows 2000 Radius Server for the Radius/Proxy Server service to be configured correctly.

IAS 1.0 is available either as part of the Microsoft Internet Connection Services for RAS in the Microsoft Windows NT 4.0 Option Pack, or as part of the Microsoft Commerical Internet System (MCIS) 2.0 in the Microsoft BackOffice family of server suites.

For additional information about Internet Authentification Service and Commerical Internet System software, please visit the following Microsoft Web sites:

http://www.microsoft.com/NTServer/commserv/deployment/moreinfo/ICS_FAQ.asp#4

http://www.microsoft.com/mcis/default.asp

Additional query words:

Keywords : kbinterop ntsecurity ntsp kbbug4.00 kbfix4.00 NT4SP6Fix
Version : winnt:1.0,4.0 SP5
Platform : winnt
Issue type : kbbug