Re: [WIRELESS-LAN] Ekahau Licensing Chat

2021-07-27 Thread Charles Jouglard
I have extra popcorn ready waiting for the hammer to drop. Specifically,
after many jump on the four year financing bandwagon; then a new SideKick
with 6GHz comes out making all the other SideKicks a bit less useful.
YMMV,
Charles
Senior Wireless Engineer

On Tue, Jul 27, 2021 at 4:41 PM Blake Krone  wrote:

> It could have been much worse too if they really did what they were
> thinking about doing so yeah I don’t expect much of anything to come out of
> this. As it sits they feel they are being nice with what they are doing
> instead of what they wanted to do originally with the Connect launch.
>
> On Jul 27, 2021, at 4:13 PM, Lee H Badman <
> 00db5b77bd95-dmarc-requ...@listserv.educause.edu> wrote:
>
> I have found the Ekahau folks I've tried to escalate my issues to to be
> apathetic, condescending, and unresponsive. This one I'll sit out but wish
> the group well.
>
>
> *Lee Badman* | Network Architect | CWNE #200
> Information Technology Services
> 206 Machinery Hall
> 120 Smith Drive
> Syracuse, New York 13244
> *t* 315.443.3003  * f* 315.443.4325   *e* lhbad...@syr.edu *w* its.syr.edu
> *SYRACUSE UNIVERSITY*
> syr.edu
> --
> *From:* The EDUCAUSE Wireless Issues Community Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Ian Lyons <
> ily...@rollins.edu>
> *Sent:* Tuesday, July 27, 2021 5:10 PM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> *Subject:* [WIRELESS-LAN] Ekahau Licensing Chat
>
> https://rollins.webex.com/meet/ilyons
>
>
> Good Day Everyone!  A few weeks ago, there was an exchange of information
> regarding the new licensing at Ekahau.  The sentiment was not missed by a
> neutral third party who knows someone at Ekahau.  This person reached out
> to Eric and me, inquiring about a meeting that could be put together for
> those impacted by Ekahau licensing.  Eric and I agreed and decided we could
> host a meeting for this purpose.
>
> No one is selling anything.  The purposed of this meeting, Friday August
> 6th at 2pEST, is for the WiFi list serve to have a space to talk to an SVP
> of Sales at Ekahau and respectfully explain how the new licensing is
> impacting those that use their product.
>
> Please mark your calendars for August 6th @ 2p EST and the webex is :
> https://rollins.webex.com/meet/ilyons
>
>
> 
> Meet virtually with Cisco Webex. Anytime, anywhere, on any device.
> 
> Simple, modern video meetings for everyone on the world's most popular and
> trusted collaboration platform.
> rollins.webex.com
>
>
> Cheers
> Ian J Lyons and Eric Kenny - Educause WiFi LAN Leaders
>
>
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Re: [WIRELESS-LAN] Ekahau Licensing Chat

2021-07-27 Thread Blake Krone
It could have been much worse too if they really did what they were thinking 
about doing so yeah I don’t expect much of anything to come out of this. As it 
sits they feel they are being nice with what they are doing instead of what 
they wanted to do originally with the Connect launch.

> On Jul 27, 2021, at 4:13 PM, Lee H Badman 
> <00db5b77bd95-dmarc-requ...@listserv.educause.edu> wrote:
> 
> I have found the Ekahau folks I've tried to escalate my issues to to be 
> apathetic, condescending, and unresponsive. This one I'll sit out but wish 
> the group well.
> 
> 
> Lee Badman | Network Architect | CWNE #200
> Information Technology Services
> 206 Machinery Hall
> 120 Smith Drive
> Syracuse, New York 13244
> t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu 
>  w its.syr.edu 
> SYRACUSE UNIVERSITY
> syr.edu 
> From: The EDUCAUSE Wireless Issues Community Group Listserv 
>  on behalf of Ian Lyons 
> 
> Sent: Tuesday, July 27, 2021 5:10 PM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> Subject: [WIRELESS-LAN] Ekahau Licensing Chat
>  
> https://rollins.webex.com/meet/ilyons 
> 
> 
> Good Day Everyone!  A few weeks ago, there was an exchange of information 
> regarding the new licensing at Ekahau.  The sentiment was not missed by a 
> neutral third party who knows someone at Ekahau.  This person reached out to 
> Eric and me, inquiring about a meeting that could be put together for those 
> impacted by Ekahau licensing.  Eric and I agreed and decided we could host a 
> meeting for this purpose.
> 
> No one is selling anything.  The purposed of this meeting, Friday August 6th 
> at 2pEST, is for the WiFi list serve to have a space to talk to an SVP of 
> Sales at Ekahau and respectfully explain how the new licensing is impacting 
> those that use their product.  
> 
> Please mark your calendars for August 6th @ 2p EST and the webex is : 
> https://rollins.webex.com/meet/ilyons 
> 
> 
>    
> Meet virtually with Cisco Webex. Anytime, anywhere, on any device. 
> 
> Simple, modern video meetings for everyone on the world's most popular and 
> trusted collaboration platform.
> rollins.webex.com
> 
> 
> Cheers
> Ian J Lyons and Eric Kenny - Educause WiFi LAN Leaders
> 
> 
> 
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire community 
> list. If you want to reply only to the person who sent the message, copy and 
> paste their email address and forward the email reply. Additional 
> participation and subscription information can be found at 
> https://www.educause.edu/community 
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire community 
> list. If you want to reply only to the person who sent the message, copy and 
> paste their email address and forward the email reply. Additional 
> participation and subscription information can be found at 
> https://www.educause.edu/community 

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Re: Ekahau Licensing Chat

2021-07-27 Thread Lee H Badman
I have found the Ekahau folks I've tried to escalate my issues to to be 
apathetic, condescending, and unresponsive. This one I'll sit out but wish the 
group well.


Lee Badman | Network Architect | CWNE #200
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w 
its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Ian Lyons 
Sent: Tuesday, July 27, 2021 5:10 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] Ekahau Licensing Chat

https://rollins.webex.com/meet/ilyons



Good Day Everyone!  A few weeks ago, there was an exchange of information 
regarding the new licensing at Ekahau.  The sentiment was not missed by a 
neutral third party who knows someone at Ekahau.  This person reached out to 
Eric and me, inquiring about a meeting that could be put together for those 
impacted by Ekahau licensing.  Eric and I agreed and decided we could host a 
meeting for this purpose.


No one is selling anything.  The purposed of this meeting, Friday August 6th at 
2pEST, is for the WiFi list serve to have a space to talk to an SVP of Sales at 
Ekahau and respectfully explain how the new licensing is impacting those that 
use their product.


Please mark your calendars for August 6th @ 2p EST and the webex is : 
https://rollins.webex.com/meet/ilyons


[https://rollins.webex.com/mw3300/mywebex/html/img/webexball_opengraph_new.png]
Meet virtually with Cisco Webex. Anytime, anywhere, on any 
device.
Simple, modern video meetings for everyone on the world's most popular and 
trusted collaboration platform.
rollins.webex.com


Cheers
Ian J Lyons and Eric Kenny - Educause WiFi LAN Leaders




**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Ekahau Licensing Chat

2021-07-27 Thread Ian Lyons
https://rollins.webex.com/meet/ilyons



Good Day Everyone!  A few weeks ago, there was an exchange of information 
regarding the new licensing at Ekahau.  The sentiment was not missed by a 
neutral third party who knows someone at Ekahau.  This person reached out to 
Eric and me, inquiring about a meeting that could be put together for those 
impacted by Ekahau licensing.  Eric and I agreed and decided we could host a 
meeting for this purpose.


No one is selling anything.  The purposed of this meeting, Friday August 6th at 
2pEST, is for the WiFi list serve to have a space to talk to an SVP of Sales at 
Ekahau and respectfully explain how the new licensing is impacting those that 
use their product.


Please mark your calendars for August 6th @ 2p EST and the webex is : 
https://rollins.webex.com/meet/ilyons


[https://rollins.webex.com/mw3300/mywebex/html/img/webexball_opengraph_new.png]
Meet virtually with Cisco Webex. Anytime, anywhere, on any 
device.
Simple, modern video meetings for everyone on the world's most popular and 
trusted collaboration platform.
rollins.webex.com


Cheers
Ian J Lyons and Eric Kenny - Educause WiFi LAN Leaders




**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Re: PEAP Username format in Domain Joined machines

2021-07-27 Thread Tim Cappalli
If you're planning on keeping legacy auth, you can modify the supplicant config 
in your GPO/MDM policy to prompt the user the first time. They can then enter 
their fully qualified username and password when prompted.

Legacy protocols should never be used without a GPO or MDM enforced supplicant.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Pratik Mehta 

Sent: Tuesday, July 27, 2021 12:10:58 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines


Yes, we are using eduroam. For the Radius server we use Aruba ClearPass.



Additional Context: The reason for this ask is to support our faculty/staff 
that visits other “eduroam” participating universities. We are also using the 
authentication option of “User auth or computer auth” so when the user is 
logged out of the machine, the device remains connected to the wireless network 
via computer authentication. We understand that we can manually modify the 
profile to unselect “Automatically use my windows logon and password” in the 
wireless profile and manually configure the user name in the format of 
USERNAME@FQDN when prompted. However, the issue is we do not have all the 
faculty/admin staff with admin rights to machine.



Thank you Tim and Lynn.



Regards,

Pratik Mehta



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Heavrin, Lynn
Sent: Tuesday, July 27, 2021 12:01 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines



I didn’t see anywhere he mentioned this was for eduroam, but after a google 
search it seems Princeton uses it for their primary SSID, so yes that is a good 
point.  That’s one big factor in why we’re moving to EAP-TLS and forcing the 
format instead of trying to accommodate whatever the user decides to type in.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:47 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines

I would not recommend that as the device will not be routable on eduroam 
outside your campus.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Heavrin, Lynn mailto:lheav...@wustl.edu>>
Date: Tuesday, July 27, 2021 at 11:41
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines

Depending on your RADIUS server you could rewrite the identity to whatever you 
want.  Some are more granular than others with what all you can do.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines

No, it cannot.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Pratik Mehta mailto:pra...@princeton.edu>>
Date: Tuesday, July 27, 2021 at 11:14
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines

Hello Everyone,



On a Windows 10 device, and when using “Automatically use my windows logon and 
password” for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.



Thank you for your insights and assistance.



Regards,

Pratik Mehta



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 

RE: PEAP Username format in Domain Joined machines

2021-07-27 Thread Pratik Mehta
Yes, we are using eduroam. For the Radius server we use Aruba ClearPass.

Additional Context: The reason for this ask is to support our faculty/staff 
that visits other "eduroam" participating universities. We are also using the 
authentication option of "User auth or computer auth" so when the user is 
logged out of the machine, the device remains connected to the wireless network 
via computer authentication. We understand that we can manually modify the 
profile to unselect "Automatically use my windows logon and password" in the 
wireless profile and manually configure the user name in the format of 
USERNAME@FQDN when prompted. However, the issue is we do not have all the 
faculty/admin staff with admin rights to machine.

Thank you Tim and Lynn.

Regards,
Pratik Mehta

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Heavrin, Lynn
Sent: Tuesday, July 27, 2021 12:01 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines

I didn't see anywhere he mentioned this was for eduroam, but after a google 
search it seems Princeton uses it for their primary SSID, so yes that is a good 
point.  That's one big factor in why we're moving to EAP-TLS and forcing the 
format instead of trying to accommodate whatever the user decides to type in.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:47 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
I would not recommend that as the device will not be routable on eduroam 
outside your campus.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Heavrin, Lynn mailto:lheav...@wustl.edu>>
Date: Tuesday, July 27, 2021 at 11:41
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Depending on your RADIUS server you could rewrite the identity to whatever you 
want.  Some are more granular than others with what all you can do.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
No, it cannot.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Pratik Mehta mailto:pra...@princeton.edu>>
Date: Tuesday, July 27, 2021 at 11:14
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Hello Everyone,

On a Windows 10 device, and when using "Automatically use my windows logon and 
password" for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 

Re: PEAP Username format in Domain Joined machines

2021-07-27 Thread Heavrin, Lynn
I didn’t see anywhere he mentioned this was for eduroam, but after a google 
search it seems Princeton uses it for their primary SSID, so yes that is a good 
point.  That’s one big factor in why we’re moving to EAP-TLS and forcing the 
format instead of trying to accommodate whatever the user decides to type in.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:47 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
I would not recommend that as the device will not be routable on eduroam 
outside your campus.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Heavrin, Lynn 

Date: Tuesday, July 27, 2021 at 11:41
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Depending on your RADIUS server you could rewrite the identity to whatever you 
want.  Some are more granular than others with what all you can do.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
No, it cannot.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Pratik Mehta 

Date: Tuesday, July 27, 2021 at 11:14
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Hello Everyone,

On a Windows 10 device, and when using “Automatically use my windows logon and 
password” for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community



The materials in this message are private and may contain Protected Healthcare 
Information or other information of a sensitive nature. If you are not the 
intended recipient, be advised that any unauthorized use, disclosure, copying 
or the taking of any action in reliance on the contents of this information is 
strictly prohibited. If you have received this email in error, please 
immediately notify the sender via telephone or return mail.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information 

Re: PEAP Username format in Domain Joined machines

2021-07-27 Thread Tim Cappalli
I would not recommend that as the device will not be routable on eduroam 
outside your campus.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Heavrin, Lynn 

Date: Tuesday, July 27, 2021 at 11:41
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Depending on your RADIUS server you could rewrite the identity to whatever you 
want.  Some are more granular than others with what all you can do.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
No, it cannot.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Pratik Mehta 

Date: Tuesday, July 27, 2021 at 11:14
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Hello Everyone,

On a Windows 10 device, and when using “Automatically use my windows logon and 
password” for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community



The materials in this message are private and may contain Protected Healthcare 
Information or other information of a sensitive nature. If you are not the 
intended recipient, be advised that any unauthorized use, disclosure, copying 
or the taking of any action in reliance on the contents of this information is 
strictly prohibited. If you have received this email in error, please 
immediately notify the sender via telephone or return mail.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Re: PEAP Username format in Domain Joined machines

2021-07-27 Thread Heavrin, Lynn
Depending on your RADIUS server you could rewrite the identity to whatever you 
want.  Some are more granular than others with what all you can do.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Date: Tuesday, July 27, 2021 at 10:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
No, it cannot.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Pratik Mehta 

Date: Tuesday, July 27, 2021 at 11:14
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Hello Everyone,

On a Windows 10 device, and when using “Automatically use my windows logon and 
password” for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


The materials in this message are private and may contain Protected Healthcare 
Information or other information of a sensitive nature. If you are not the 
intended recipient, be advised that any unauthorized use, disclosure, copying 
or the taking of any action in reliance on the contents of this information is 
strictly prohibited. If you have received this email in error, please 
immediately notify the sender via telephone or return mail.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Re: PEAP Username format in Domain Joined machines

2021-07-27 Thread Tim Cappalli
No, it cannot.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Pratik Mehta 

Date: Tuesday, July 27, 2021 at 11:14
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: [WIRELESS-LAN] PEAP Username format in Domain Joined machines
Hello Everyone,

On a Windows 10 device, and when using “Automatically use my windows logon and 
password” for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


PEAP Username format in Domain Joined machines

2021-07-27 Thread Pratik Mehta
Hello Everyone,

On a Windows 10 device, and when using "Automatically use my windows logon and 
password" for MSCHAPv2 properties of PEAP authentication, the default username 
format that Windows uses in NETBIOS_DOMAIN_NAME\USERNAME.  Does anyone know if 
the default format can be to changed to USERNAME@FQDN (UPN format)?  This is 
obviously for a domain joined machine.

Thank you for your insights and assistance.

Regards,
Pratik Mehta


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community