IAS on SBS problems resolved!
Ok, here goes the acronym game.
Seems installing IAS on a server with ISA where a DC is involved causes extension DLLs to not load thanks to an authentication DLL from ISA. *ugh*. Get all that? IAS and ISA are different products. One's a RADIUS server, and one's a firewall. And they aren't playing nice together.
Not quite sure how I can programmatically handle this. For version one, I will just document this in the installation guide for the IAS installation. On top of that, ISA installs a "Connection Policy" into the IAS server which has to be modified so my extension DLL can work properly. Good news is, I now have a working IAS DLL. Bad news is, its a week and a half late. *sigh*. And I still have to rewire it to communicate with the Anvil Web Service I got working last week.
Good news is, the major hurdles are now all overcome. The next few days will be a bit easier, even though I can see we are already a week and a bit behind. Then again, writing a RADIUS extension is pretty much its own product. Guess I shouldn't be complaining. I wonder if that entitles me to an extra 30 days of development :)
Ya, I didn't think so either.
Comments
I do not want to ruin your fun, but my experience confirms the Pareto Principle (as in Code Complete--"[...] you can get 80 percent of the result with 20 percent of the effort") in some reversed sense, i.e. when you overcome the major pains, the 80% of the work is still left.
Creating the installer, writing, proofreading and integrating the manual, etc. can take surprisingly much time.
Sure, you can ship the beta without a manual and find other points to help the early release.
Posted by: pb | August 29, 2006 11:41 PM
Agreed. My point was that the biggest hurdles have been overcome. Going into this project the two biggest challenges was integrating the crypto libraries to do the authentication and writing the IAS extension, which was new to me. There is a LOT of work still left to do. But thats a time commitment issue, not one of complexity. I have decided that with the week and a half delays in fighting with the IAS extension, I would move the beta out two weeks to account for it. That gives me plenty of time to get those tasks done.
Posted by: Dana Epp | August 30, 2006 07:38 AM
finally could you write the IAS DLL extension ?
Posted by: Nelson | February 15, 2007 11:21 AM
Yes. We have a fully functional IAS extension that works.
Posted by: Dana Epp | February 15, 2007 11:28 AM