Hmm, that is worrisome.  We have the same setup, but with 10.6 users do get 
prompted to re-enter username/password when these have changed.
I'll check with our support group that is doing some tests with 10.7 see if 
they have seen the same.

Thanks for bringing this up.

Marcelo Lew
Wireless Enterprise Administrator
University Technology Services
University of Denver
Desk: (303) 871-6523
Cell: (303) 669-4217
Fax:  (303) 871-5900
Email: [email protected]<mailto:[email protected]>

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:[email protected]] On Behalf Of Holland, Ryan C.
Sent: Thursday, August 04, 2011 3:01 PM
To: [email protected]
Subject: [WIRELESS-LAN] MacOS Lion & Wireless Password Resets

I have finally got my hands on MacOS 10.7 (lion) and have started running it 
through wireless tests. One item I find very worrisome is this:
- Via WPA2-Enterprise (PEAP/MSCHAPv2), I connect to the SSID using username & 
password1; these credentials are then stored in the keychain
- If I change my password to, say, "password2", then the next time I connect, 
the Mac fails authentication
It seems that the Mac, if failing authentication, never prompts for the 
username & password to be reentered.

Our university is soon to roll-out and enforce a 90-day password policy, and I 
am concerned that users will be unable to authenticate and forced to remove the 
password from their keychain.


Have any of you run into this similar issue? If so, how do handle this 
behavior? (I don't recall it being this way in MacOS 10.6 or 10.5)

==========
Ryan Holland
Network Engineer, Wireless
Office of the Chief Information Officer
The Ohio State University
614-292-9906   [email protected]<mailto:[email protected]>

Submit a Kudos to an OCIO 
employee!<http://www.surveygizmo.com/s/514095/giveociokudos>

********** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.






















.
**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to