cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

User-ID agent, 802.1x and Windows 2008 NPS - help needed!

Not applicable

I followed the following guide here:

PANOS 5.0 User-ID Installation and configuration including integration guide with Microsoft NPS

I am able to capture the 6272 Windows Events and pass them to the UIDRADIUSScript.vbs, but I am having issues at that point. I have debugging enabled in UIDConfig.xml, and here is a sample of the output I get, it appears I am unable to obtain the DHCP scopes.

===================================================================================================================================

UID Script triggered at 11/15/2013 10:08:25 AM

Capturing arguments...

Script executed with arguments: "testuser" 94-94-26-E4-CD-CA

Loading Exclusions...

Exclusions loaded successfully

DHCP Lease query for Windows Event User: testuser Calling Station ID: 94-94-26-E4-CD-CA Querying DHCP Servers: 192.168.1.66

Not machine auth event

DHCP Server: 192.168.1.66

Defining scopes:

Searching DHCP leases for 949426e4cdca

       SCOPE:

UID Script finished execution at 11/15/2013 10:08:25 AM Run-time: 0 seconds

===================================================================================================================================

Here is my UIDConfig.xml

<?xml version="1.0" encoding="UTF-8"?>

<user-id-script-config>

<wireless-lan-controllers>

<wlc>1.1.1.1</wlc>

<wlc>1.1.1.2</wlc>

</wireless-lan-controllers>

<domain>NSCORP</domain>

<LogPath>C:\Windows\System32\LogFiles\npsaccounting\</LogPath>

<LogFormat>DHCP</LogFormat>

<AgentServer>127.0.0.1</AgentServer>

<AgentPort>5006</AgentPort>

<Debug>2</Debug>

<DHCPServer>dc.nscorp.local</DHCPServer>

<Key>key</Key>

<VSYS>vsys0</VSYS>

<Agent>1</Agent>

<Timeout>20</Timeout>

</user-id-script-config>

I am running the script as a domain admin, and I also added the domain admin to the DHCP Users group as instructed in the guide. My NPS server and User-ID agent are running on the same server, my DHCP server is running on another server.

Who Me Too'd this topic