Error Message: Event ID 17 Message Authenticator Is Incorrect (283202)

SYMPTOMS

When you attempt to authenticate a Nortel (formally Bay Networks) Varsalar 5000, 8000, or Bay 5000/5399 network access server (NAS) to a Windows 2000-based Internet Authentication Service server (with Remote Authentication Dial-In User Service [RADIUS]), you may receive the following error message in the event log and you may not be able to log on to the computer:

Event ID 17 message authenticator is incorrect.

RESOLUTION

To resolve this behavior, contact Nortel Technical Support at the following Nortel Web site and request bug fix #CR.143693-1, which had been released on February 15, 2001:

http://www.nortelnetworks.com

NOTE: This behavior does not occur with the Microsoft NT4-based RADIUS server or other third-party RADIUS servers (for example, the Steel-Belted Radius, a RADIUS server from Funk) that do not take advantage of the additional security enhancements offered in Requests for Comments (RFC) 2869.
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

MORE INFORMATION

The Nortel network access servers mentioned in the Symptoms section have implemented the Message authenticator attribute that is based on an earlier RFC draft (Draft-ietf-radius-ext-01.txt dated September 1997) instead of the current RFC 2869, section 5.14, which is dated June 2000.