We use a radius with an AD agent component... speaking AD... an ldap bind is not necessary. surely SBR can do this also.
Randall Grimshaw [email protected] ________________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [[email protected]] On Behalf Of Manoj Abeysekera [[email protected]] Sent: Thursday, March 04, 2010 2:00 PM To: [email protected] Subject: Re: [WIRELESS-LAN] PEAP/MSCHAPv2 + Active Directory recommendations I'm interested too.. Manoj ----------------------------------- P. Manoj Abeysekera, CWNA Network Engineer American University 4200 Wisconsin Ave, NW Washington DC. 20016 202-885-2702 From: Ryan Holland <[email protected]> To: [email protected] Date: 03/04/2010 01:56 PM Subject: [WIRELESS-LAN] PEAP/MSCHAPv2 + Active Directory recommendations Sent by: The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]> ________________________________ We currently have an 802.1X environment using PEAP/MSCHAPv2 to Steel-Belted radius. SBR queries SQL for user credential validation. We are (thankfully) migrating away from SQL to an Active Directory solution. I have been told by Juniper that we will be unable to search/query for additional attributes in AD since we are using MSCHAPv2; I'm told that PAP (clear text passwords) must be used in order to use the ldap auth to BIND to AD. Being that we need to be able to query for additional attributes, I am inquiring what other institutions are doing. If you are using both PEAP/MSCHAPv2 and Active Directory, I would appreciate you taking a moment to share how you are set up. Feel free to respond off list as well. Many thanks! ========== Ryan Holland Network Engineer, Wireless Office of the Chief Information Officer The Ohio State University 614-292-9906 [email protected]<mailto:[email protected]> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
