NPS server with NPS extension for MFA
hi,
i've setup nps server nps extension mfa used in order use 2-factor authentication clients vpn requests.
of clients connects fine of them authentication failures several times until several reboots , @ , connecting successfully.
can see in security logs on nps server 2 different audit failure logs in different cases:
1) event id: 6273; reason code: 21; reason: nps extension dynamic link library (dll) installed on nps server rejected connection request.
2) event id: 6274; reason code: 9; reason: request discarded third-party extension dll file.
reason these events , how prevent them? said, @ last users can establish vpn connection before maybe presented several authentication failures or performed several reboots try if can fix things.
kind regards,
zoran
i've setup nps server nps extension mfa used in order use 2-factor authentication clients vpn requests.
of clients connects fine of them authentication failures several times until several reboots , @ , connecting successfully.
can see in security logs on nps server 2 different audit failure logs in different cases:
1) event id: 6273; reason code: 21; reason: nps extension dynamic link library (dll) installed on nps server rejected connection request.
2) event id: 6274; reason code: 9; reason: request discarded third-party extension dll file.
reason these events , how prevent them? said, @ last users can establish vpn connection before maybe presented several authentication failures or performed several reboots try if can fix things.
kind regards,
zoran
zoran zasovski
hi,
event id 6274 — nps accounting request message processingreconfigure, upgrade, or replace radius client
condition occurs when nps discards accounting requests because structure of accounting request message sent radius client not comply radius protocol.
reconfigure, upgrade, or replace radius client:
1 contact radius client vendor configuration assistance or firmware updates. many radius client vendors provide updated firmware allows radius client send accounting-request messages comply radius protocol.
2 if radius client vendor cannot provide reconfiguration instructions or firmware allows radius client send radius protocol-compliant messages, must obtain , install radius protocol-compliant radius client use nps.
event id 6273 — nps authentication status
error might caused 1 of following conditions:
1 user not have valid credentials
2 connection method not allowed network policy
3 network access server under attack
4 nps not have access user account database on domain controller
5 nps log files or sql server database not available
more information event, please refer following article:
https://technet.microsoft.com/en-us/library/cc735399%28v=ws.10%29.aspx?f=255&mspperror=-2147217396
https://technet.microsoft.com/en-us/library/cc735339(v=ws.10).aspx
best regards,frank
please remember mark replies answers if , unmark them if provide no help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.
Windows Server > Network Access Protection
Comments
Post a Comment