IAS denying all users with bad username or password

[Stuart Stafford]

We have all our Cisco network devices authenticating against a W2K IAS server
for administrative logins using PAP. This works seamlessly.

We are now tring to use IAS on W2K3 SP1 and it fails, denying access to all
users with "bad username or password" in the event log messages.

The configuration is the same, it's the same domain as before - the only
difference is the OS version.

Anybody able to assist?

[James McIllece [MS]]

=?Utf-8?B?U3R1YXJ0IFN0YWZmb3Jk?= <Stuart

Post by Stuart Stafford
We have all our Cisco network devices authenticating against a W2K IAS
server for administrative logins using PAP. This works seamlessly.
We are now tring to use IAS on W2K3 SP1 and it fails, denying access
to all users with "bad username or password" in the event log
messages.
The configuration is the same, it's the same domain as before - the
only difference is the OS version.
Anybody able to assist?

Not sure I understand the situation.

Are the domain controllers running W2K or WS03?

The IAS server -- did you upgrade the server from W2K to WS03 or is it a
clean install of WS03? Is the IAS server joined to the domain? Does it have
permissions to read user account properties in Active Directory (eg is it a
member of the RAS and IAS servers group in AD)?