In the last two days I have found one occurrence of "com.apple.systemdefault"
We run both Meru and Cisco going through Freeradius. It was coming from a Cisco controller and was a Stop accounting record. I was unable to find a corresponding Start record yet. We have not noticed this before, but may have happened. --- Walter Reynolds Principal Systems Security Development Engineer ITS Communications Systems and Data Centers University of Michigan (734) 615-9438 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Lee H Badman Sent: Tuesday, January 31, 2012 12:55 PM To: [email protected] Subject: [WIRELESS-LAN] Strange Apple 802.1x Client Names Not quite sure what to make of this yet. If anyone is running an 802.1x secure wireless network, can you search your wireless management systems for wireless clients called either of these: com.apple.kerberos.kdc com.apple.systemdefault we have a handful of these that are authenticating as valid user names in our Cisco wireless/ACS environment. We only auth against AD, and we typically see a mix of "real" usernames in log that will somehow correlate to these, but at the same time it's weird that these funky names are showing as valid usernames both in the WLAN system and in ACS. Web searching shows that these are some kerfuffle to do with obsolete keychain certs in the Apple OS. Wild and weird- anyone been here before? -Lee Badman ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
