How to make IAS to do a PROXY to different server only when the authentication is rejected?

[David]

Hello,

Please tell me, How to make IAS to do a PROXY to a different server
only in case that the local authentication is rejected?

Details:

We wrote a Radius plug-in DLL, which verify the user credentials in
its DB. If the login/passw is ok, the plug-in response 'Accept' and
allows access to the server.

We need that in case of not-valid login/passw ONLY, the IAS will
forward the credentials to another IAS server for verification.

Is it possible in win2000 or win2003 servers?

We have tried a lot, but still not succeeded.

Many thanks,

David

 

[Priya Raghavan [MSFT]]

I dont think this is possible. You have to decide on where you want the
authentication to happen -> on the local server or forwarded to a remote
server.
Making the decision after authentication is rejected is not possible.