-
Title
Two factor authentication with Vasco Identikey -
Description
Two factor authentication in vWorkspace with Vasco Identikey needs extra configuration on the Identikey server.
Enable trace logging on the Identikey server :
1. Open the Identikey Server Configuration program, and then click on the General icon, you'll see the General Settings page.
2. Half way down this page is the Tracing section. Turn this onto Full Tracing
3. This create a log C:\Program Files\VASCO\Identikey 3.4\log\ikeyserver.trace
Review this log for communication from vWorkspace and you'll see an error
-
Cause
[2012/04/11|08:03:02.711535][02236][MINOR][ValidationTask::getNASLocationFromPacket] > No NAS-IP or NAS-Identifier attribute found.
[2012/04/11|08:03:02.711535][02236][MAJOR][ValidationTask::routePacket] > Rejecting RADIUS request due to missing NAS Location
-
Resolution
Workaround
Follow this Vasco KB article to resolve the issue: http://www.vasco.com/Images/KB_120079.pdf
To force IDENTIKEY Server to accept such an access request:
1. Stop the IDENTIKEY Server service/daemon
2. Open the IDENTIKEY Server configuration file ‘identikeyconfig.xml’
(default location is: C:\Program Files\VASCO\Identikey 3.1\bin)
3. Locate the XML section <RadiusCommunicator>
4. Add the following new XML configuration item in this section
<Allow-Unspecified-NAS type="bool" data="true"/>
5. Save and close the configuration file
6. Start the IDENTIKEY Server service/daemon