0
votes
0answers
19 views

OpenVPN Radiusplugin AD and the user restriction

Im using FreeRadius which is using Samba4 (AD DC) as the user/password provider. OpenVPN is using Radiusplugin, which use that FreeRadius Server for authentication. This solution work great, but I ...
1
vote
1answer
28 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
2answers
131 views

Radius Authentication

I will first tell you a little bit about how I am set up. I have wireless clients connecting to an ARUBA Mobility Controller using a RADIUS server for Authentication. I need to ensure I can get ...
2
votes
2answers
1k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
1
vote
1answer
116 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
1
vote
1answer
735 views

Cisco ISE Wlan user authentication fails for users with umlaut

We have setup a Cisco Identity Services Engine to manage WLAN access for our users. Access should be granted to users from a specific Windows Active Directory group. This works fine for users having a ...
1
vote
1answer
540 views

Machine account authentication on Radius server

My workstation is under Linux. I have an Active Directory domain controller + Radius server on Windows 2008. I can verify user account 'radius-01' using 'radtest' tool: $ radtest -t pap radius-01 ...
2
votes
1answer
267 views

PEAP validation against a different, secondary domain?

Probably a little bit confusing, so let me explain the situation. Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
0
votes
1answer
730 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
2
votes
3answers
1k views

Server 2008 VPN authentication WITHOUT Active Directory

First the set up. 15 workgroup users, and we have a Watchguard firewall with VPN. Currently using the Watchguard to authenticate users for VPN access, but the boss wants to use server 2008 as the ...
3
votes
1answer
693 views

Is a PKI required when authenticating a Cisco Aironet AP via radius against AD

We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK. To this ...
4
votes
5answers
4k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
1
vote
3answers
3k views

Are Reversibly Encrypted Passwords safe, and Why isn't it working when enabled for a user?

In my event log, when my router tries to use Radius to authetnicate I get the following: """The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A ...