Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anyone know a tool that works to test authentication against a Windows Radius Server?

I have tried radtest with:

radtest -d /usr/share/freeradius/ kbrandt 'betYouCantGuess' theServer 10 secretIGaveforMyIP 0

But I get:

Sending Access-Request of id 120 to port 1812
    User-Name = "kbrandt"
    User-Password = "betYouCantGuess"
    NAS-IP-Address =
    NAS-Port = 10
    Framed-Protocol = PPP
rad_recv: Access-Reject packet from host port 1812, id=120, length=20

On the server in the log there is:,kbrandt,11/06/2009,10:38:28,IAS,THESERVER,4,,5,10,7,1,4108,,4116,0,4128,Kyle's Workstation,4155,1,4154,Use Windows authentication for all users,4129,MYDOMAIN\kbrandt,4127,1,4149,Connections to other access servers,25,311 1 11/06/2009 15:32:42 4,4130, Brandt,4136,1,4142,0,kbrandt,11/06/2009,10:38:28,IAS,THESERVER,25,311 1 11/06/2009 15:32:42 4,4130, Brandt,4149,Connections to other access servers,4108,,4116,0,4128,Kyle's Workstation,4155,1,4154,Use Windows authentication for all users,4129,MYDOMAIN\kbrandt,4127,1,4136,3,4142,66

I'm new to Radius, so its possible I haven't configured something right. All I did was install the service, and added my ip as a RADIUS Client using Radius-Standard Vendor.

share|improve this question
Maybe I need to add a Remote Access Policy (The defaults are not enough)? – Kyle Brandt Nov 6 '09 at 15:52
Also, any tool that tells me what all those fields in the IAS log mean? – Kyle Brandt Nov 6 '09 at 15:59
up vote 0 down vote accepted

Got it working, I removed the policies that were there. Then added one for a group I am in, and also had to add PAP authentication. More information on why I was denied was available in the Event Viewer.

share|improve this answer
You should read up on Remote Access Policies. They're a little bit counter-intuitive, but you can do some really cool stuff with them. – Evan Anderson Nov 6 '09 at 16:33
Evan: Ya, trying to find something short and to the point. I think with this little project of mine (I think you get the idea from my recent posts), is that all I want is authentication, and the router would handle the rest. Does that seem right? – Kyle Brandt Nov 6 '09 at 16:53
There are a lot of features of Remote Access Policies you won't be using in a RADIUS situation, so knowing how the policies are evaluated and applied is probably the gist of what you need to know. – Evan Anderson Nov 8 '09 at 22:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.