Re: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems

2008-07-23 Thread Julian Y. Koh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 17:00 -0400 7/22/2008, John York wrote: I'm sure someone has gotten this to work before. Does authenticating to an ldap server mean we are forced to use EAP-TLS with client certs, install some client on the student machines, or is there another

RE: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems

2008-07-23 Thread Case, Brandon J
If you're using ACS with an external LDAP database then you're limited to EAP-FAST, PEAP-GTC, or EAP-TLS according to the ACS documentation. We did run into a similar problem but decided to access the user database via RADIUS instead (we have a proprietary, home-grown system which is accessible

RE: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems

2008-07-23 Thread j.vaningenschenau
] On Behalf Of John York Sent: woensdag 23 juli 2008 15:56 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems That's pretty much what I've run into. Do you know of something else I could use in place of ACS to query ldap? We're part of the Virginia

Re: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems

2008-07-23 Thread Mike King
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems That's pretty much what I've run into. Do you know of something else I could use in place of ACS to query ldap? We're part of the Virginia Community College System, and they own the student database and only provide

Re: [WIRELESS-LAN] PEAP/MS-CHAPv2 and LDAP problems

2008-07-22 Thread Angela K Hollman
We already went through something similar. We ended up putting all our students in Active Directory so we didn't have to worry about an additional supplicant and went with PEAP/MSCHAPV2. The method that I was seriously considering was TTLS which is only a certificate on the server-side (very