http://www.my80211.com/home/2011/11/8/cisco-acs-5x-radius-proxy-server-to-strip-prefix-or-suffix-u.html
-----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Dennis Xu Sent: Thursday, September 03, 2015 4:24 PM To: [email protected] Subject: [WIRELESS-LAN] Eduroam authentication question with AD We have one issue with eduroam and AD authentication. We authenticate eduroam users to Active Directory using PEAP-mschap-v2. The issue relies at our AD domain name which is a sub domain called cfs.uoguelph.ca. If users try to login with username [email protected], the authentication will fail as the domain name does not match. We had to strip the "@uoguelph.ca" suffix on our ACS 4.2 to make it work but the same suffix stripping functionality does not exist in ACS 5.x so we have to find other alternatives. I would to know if it is a common issue in universities that the AD domain does not match the main domain? If you have the same issue, what are your solutions? Thanks. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 [email protected] www.uoguelph.ca/ccs ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_groups_&d=AwICaQ&c=SgMrq23dbjbGX6e0ZsSHgEZX6A4IAf1SO3AJ2bNrHlk&r=rtlMYUF4nwLIYnoG0qXTf9aFc5RLK7DMyf8lTMu__vs&m=ZGNGEwI7MuX6ZYb8zI2OPHTjBPbrVb6lKgssAE646gU&s=0jLcqQro-UDEbuxgwokCI63P6yj9DcGA3-grmtL4vX4&e= . ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
