Justin,

Please re-read the Q article that you cited.  This makes the distinct
statement that you are already using IAS (Microsoft Internet
Authentication Service), so this has nothing to do with the problem that
you're experiencing.

Unless, however, you are using IAS on your RAS server to set up
authentication / auditing.

And, you should NOT have to set up RADIUS, IAS or any other complex
mechanisms to allow users to access the child domain if they are
authenticating to the parent, WAN or not.  Linton is absolutely correct
in his statements.

Clearly there is another problem here, and it has nothing to do with
RADIUS or IAS.  What else do you have in the event logs of the RAS
server that might help?

Rick Kingslan - Microsoft MVP [Windows NT/2000]
  Microsoft Certified Trainer
  MCSA, MCSE+I - Windows NT / 2000
  
"Any sufficiently advanced technology
is indistinguishable from magic."
  ---  Arthur C. Clarke





> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:ActiveDir-owner@;mail.activedir.org] On Behalf Of 
> Salandra, Justin A.
> Sent: Wednesday, October 30, 2002 5:09 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] RAS
> 
> 
> I am getting a error message that says Error 930; The 
> Authentication Server Did Not Respond to Authentication 
> Requests in a Timely Fashion
> 
> According to this error message on this Q article Q299684 - 
> Error Message: Error 930; The Authentication Server Did Not 
> Respond to Authentication Requests in a Timely Fashion they 
> say to setup RADIUS, do I need to do that? Does anyone know 
> how to configure a RADIUS Server so that it will authenticate 
> users in a child domain in the child domain and the rest of 
> the users against the parent domain?  -----Original Message-----
> From:         Linton Smith (WBTQ) [mailto:GWLLES@;Weston.ca] 
> Sent: Wednesday, October 30, 2002 6:00 PM
> To:   '[EMAIL PROTECTED]'
> Subject:      RE: [ActiveDir] RAS
> 
> That's why I'm suggesting you put a DC for the child domain 
> in the site with the RAS server in it.  Otherwise, the 
> authentication traffic will have to go over the WAN.  For a 
> RAS user, the performance hit may be negligible given that 
> his connection speed is probably less than available on the 
> WAN link, but there are other considerations as well - i.e. 
> what resources will the dialed-in user be accessing, and 
> where will they be located?  How many concurrent RAS users do 
> you wish to support?
> 
> All of this will work (assuming DNS is working properly) over 
> a WAN without a DC or the accessed resources being in the 
> same site as the RAS server, but performance may be 
> constrained by available bandwidth on the WAN link.  You can 
> eliminate the authentication traffic from the WAN if there is 
> a local DC for the child domain in the site with the RAS server.
> 
> HTH,
> 
> Linton
> 
> -----Original Message-----
> From: Salandra, Justin A. [mailto:jasalandra@;chcsnet.org]
> Sent: Wednesday, October 30, 2002 5:35 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] RAS
> 
> 
> But the RAS server and the Child Domain are separated by a WAN Link
> 
>  -----Original Message-----
> From:         Linton Smith (WBTQ) [mailto:GWLLES@;Weston.ca] 
> Sent: Wednesday, October 30, 2002 5:28 PM
> To:   '[EMAIL PROTECTED]'
> Subject:      RE: [ActiveDir] RAS
> 
> Yes, but you will want to have a DC for the child domain in 
> the same site as the RAS server to ensure rapid authentication.
> 
> Linton
> 
> -----Original Message-----
> From: Salandra, Justin A. [mailto:jasalandra@;chcsnet.org]
> Sent: Wednesday, October 30, 2002 5:09 PM
> To: ActiveDir (E-mail)
> Subject: [ActiveDir] RAS
> 
> 
> If I have a domain tree with a RAS Server in the Parent, can 
> a user dial in to that RAS server and login as a user in the 
> child domain?
> 
> Justin A. Salandra, MCSE
> Senior Network Engineer
> Catholic Healthcare System
> 914.681.8117 office
> 646.483.3325 cell
> [EMAIL PROTECTED] <mailto:jasalandra@;chcsnet.org> 
> 
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to