We are a small ISP and are using NT Radius server to authenticate users dialing
in to a national network. The vendor typically uses Postmasters which send the
request for authentication to a central Merit Radius server (v4.1) which sees
our realm name and forwards it to our Radius Server.
The problem is that as long as someone knows the realm name they get
We have our server setup to use the NT user database. We tried all sorts of
combinations of username/password and everyone is authenticated. We have been
running this for 4 months and only noticed the problem when a user has some
problems and we found the radius logs contained users not in our user database.
Anyone else experience this problem? Please let me know. I am willing to send
a net mon file but will not post publically as our system would then be wide
open for unauthorized use.
It might be a good idea for anyone running the MS commercial Radius server to
test their setup to see if they might have the same problem.