Hi James,
As Phil says, we do not believe that NPS can be made to insert the Operator-Name attribute. After sending out the advisory I realised that I should have noted that as well as needing to be made 'Operator-Name safe', IAS and NPS cannot be configured to insert Op-Name.
I have updated the Advisory to include this - available on the JANET web site.
http://www.ja.net/services/authentication-and-authorisation/janet-roaming/documents/IAS-NPS-operator-name-issue-advisory-nov2010.pdf
The Advisory was sent to JRS Tech contacts only at organisations with registered IAS/NPS ORPS.
Ed
PS. Answer for Peter Bates: Microsoft NPS = Network Policy Server
-----Original Message-----
From: JANET Roaming Service [mailto:[log in to unmask]] On Behalf Of Phil Mayers
Sent: 01 December 2010 15:54
To: [log in to unmask]
Subject: Re: IAS and NPS roaming advisory
On 01/12/10 15:33, Hodge James Mr (ITCS) wrote:
> Dear all,
>
> Our radius administrator has confirmed our NPS servers are correctly
> configured in response to the recent advisory from Ed. However he's
> having trouble finding where to setup the "Operator-Name" attribute,
> which the advisory also recommends we use. Is anyone able to provide a
> pointer please?
At the present time, we do not believe NPS can be made to transmit the
Operator-Name attribute.
JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
|