Many thanks for the reply.

It's interesting that you only have logging issues some of the time.
Every proxied auth request has the missing username here.

I have a case open with microsoft education support. If they discover anything, I'll let you and the list know.

Regards

Ian A


>-----Original Message-----
>From: simon edwins (BITS) [mailto:[log in to unmask]] 
>Sent: 23 June 2009 16:30
>To: simon edwins (BITS); I E Alder; [log in to unmask]
>Subject: RE: MS IAS logging empty username for successful JRS 
>proxied authentication requests
>
>Ian,
>
>Looks like I may have spoken a little too soon.  The first 2 
>successful RADIUS authentication requests I checked (for 
>visitors to our organisation) did appear in the IAS log file.  
>However, it seems that it doesn't always appear.  It looks as 
>though about half the time the username is not displayed.  I 
>haven't been able to find any differences between requests 
>that are logged with the username and those that are logged 
>without.  I thought perhaps the username was not appearing if 
>one particular NRPS server was used for authentication, but 
>that is not the case.  I have entries in my IAS log files for 
>each of the 3 NRPS servers relating to successful visitor 
>authentication requests, all with the username present.  Given 
>that I'm seeing the intermittent logging of the username for 
>one particular user authenticating every few minutes I wonder 
>if perhaps it is a bug within IAS.
>
>Regards
>Simon
>
>
>
>-----Original Message-----
>From: simon edwins (BITS) 
>Sent: 23 June 2009 14:45
>To: 'I E Alder'; [log in to unmask]
>Subject: RE: MS IAS logging empty username for successful JRS 
>proxied authentication requests
>
>Hi Ian,
>
>We're running IAS on a Windows 2003 system and I can confirm 
>that for both successful and unsuccessful RADIUS requests we 
>are logging the username as the second field in the IAS log 
>files.  This matches up with the username logged in the system 
>event log.
>
>
>Regards
>Simon
>
>
>
>-----Original Message-----
>From: JANET Roaming Service 
>[mailto:[log in to unmask]] On Behalf Of I E Alder
>Sent: 23 June 2009 14:06
>To: [log in to unmask]
>Subject: MS IAS logging empty username for successful JRS 
>proxied authentication requests
>
>Hello all
>
>I am running IAS as a radius server for JRS.
>
>For visitors to my site, successful radius authentications (ie 
>those proxied thru to JANET) are logged by the server event 
>log, and the IAS log.
>
>**** However, the username in the IAS log is empty (second 
>field in the comma delimited log file is empty). ****
>
>The username is in the event log, so the machine does know the 
>username. 
>
>
>For failed proxied auth requests, the username is in the IAS 
>logfile and the event log.
>
>For all radius accounting, the username appears in the IAS 
>logfile correctly.
>
>For local 802.1x authentication against our active directory, 
>the logging is OK.
>
>
>So, its just successful auth requests that are proxied thru to 
>the JANET radius that do not contain the username in my IAS log.
>
>Has anyone else seen this when using MS-IAS?
>
>Thanks in advance.
>
>Ian Alder
>Newcastle University
>
>-- 
>Disclaimer: This e-mail and any attachments are confidential 
>and intended solely for the use of the recipient(s) to whom 
>they are addressed. If you have received it in error, please 
>destroy all copies and inform the sender. This email and any 
>attachments are believed to be free from viruses but BBSRC 
>accepts no liability in connection therewith. 
>
>