Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [eap]

The tag has no usage guidance.

0
votes
0answers
11 views

EAPTLS in UNIFI not working

I'm trying to do certificate-based authentication for android with Unifi. I've set up the CA server in Windows Server 2012, configured the template, added it to mmc, also configured UniFi (I guess so)....
0
votes
0answers
24 views

VPN tunnel speed issues (Strongswan, IPSEC)

Please help me to solve the VPN speed problem with Strongswan. I setup IKEv2|EAP2 tunnel with simple client-server config on my server to use it as a secure gateway to browse the Internet. Everything ...
1
vote
0answers
8 views

App migration from Jboss 4.0.2 to Jboss 5.2 EAP

My application is working on Jboss-4.0.2 version. Customer has now insisted to migrate Jboss version to EAP 5.2 I got the EAP5.2 version & tried copying the application WAR,JAR & libraries in ...
0
votes
0answers
15 views

ADCS Network Device 802.1x EAP-TLS

I have a working solution but there's a number of things that I'm little uncertain about and I'm trying to ensure I'm following best practice. Specifically I'm setting up IP CCTV cameras to ...
0
votes
0answers
29 views

freeRADIUS rlm_python provided EAP-Message size

I successfully set up an EAP-TLS connection between freeRADIUS and a wpa_supplicant. The wpa_supplicant gets successfully authenticated by the EAP module of freeRADIUS. After that, I added the ...
1
vote
1answer
51 views

WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?

We are using, as default, PEAP and MS-CHAPv2 as inner authentication. I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
0
votes
0answers
121 views

FreeRADIUS default vs. inner-tunnel sites and EAP-TLS workflow

I am trying to setup EAP-TLS with FreeRADIUS and an IPA backend. I understand that a typical workflow is to authorize the user against LDAP first and then to authenticate the user using a certificate. ...
2
votes
0answers
216 views

Wired 802.1x on Windows 10 1803 isn't utilizing cache

So I’ve been trying to resolve 802.1x Wired authentication issues for quite some time now with limited success. The environment is based on Server 2012, Enterasys NAC using EAP-TLS1.2, with a ...
0
votes
1answer
177 views

Is it ok to use PAP with TTLS on radius server?

We have deployed Radius server ( Freeradius 3.x ) and connected it to our LDAP database (ForgeRock OpenDJ). We have successfully configured EAP-TTLS with valid certificates and set it as default ...
1
vote
1answer
87 views

vpn connection to an azure virtual network

I have to connect to a Azure VNet, Which uses a certificate to authenticate that has been provided to me. When i try to connect to the VNet i get below error The Extensible Authentication Protocol ...
2
votes
0answers
166 views

Run DHCP only after wpa_supplicant has connected (wired 802.1x)

I have a network here that uses 802.1x on the wired network to authenticate for greater privilege, BUT without (or "before") auth will place the machine in a default/quarantine network. For good luck, ...
1
vote
1answer
542 views

Strongswan IKEv2 auth - pubkey and EAP

I'am trying to setup strongswan with pubkey and EAP authentication. To login users need to have certificate and valid credentials. My certificate is ok. I tested pubkey auth and it was ok, also EAP ...
0
votes
1answer
2k views

How to enable 802.1x EAP-TTLS with PAP in Windows 7?

By default, Windows 7 doesn't support EAP-TTLS authentication method natively. If I enable IEEE 802.1X authentication in Windows 7, I can see only two authentication methods: Microsoft smart cards or ...
0
votes
1answer
688 views

How to store hashes in ipsec.secrets when using Strongswan with eap-mschapv2?

I am using eap-mschapv2 as an authentication method. It requires to store plain text passwords in ipsec.secrets. I.e. I have a password like this: user : EAP "mypassword" I want to use something ...
1
vote
0answers
224 views

Freeradius Proxy eap-mschapv2 auth to non-eap Radius server

I'm using strongswan 5.6.0 & Freeradius 3.0.13 on CentOS7 as vpn server - Strongswan send radius requests to freeradius - freeradius proxy all request to another Radius Server that not support EAP ...
0
votes
1answer
211 views

JBoss EAP XA datasource with MDB failing

I have an MDB running that is posting data to an oracle db. XA data source configured as: <xa-datasource jndi-name="java:/jdbc/HIF-BannerPU" pool-name="HIF-BannerPU" enabled="true" spy="true" use-...
0
votes
1answer
908 views

Missing raddb folder

Various tutorials on setting up a freeRADIUS server refers to the eap.conf file in the /etc/raddb folder. However when i install freeRADIUS on my ubuntu server, the eap.conf file are found in /etc/...
2
votes
1answer
3k views

Freeradius VLAN assignment with EAP-TLS and WiFi 802.1x

I'm using FreeRadius with a Ubitquiti WiFi AP with 802.1x auth using EAP-TLS (mutual client/server cert based auth). This is working well for static VLANs (i.e. specified on the AP). I'd like to ...
1
vote
0answers
366 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
0
votes
1answer
735 views

freeradius gives “no shared cipher” for windows 10 client

I have a working configuration of 802.1X authentification on my switch. The radius server is a freeradius instance with EAP-TLS configured. Everything works fine on linux (and android devices), but ...
0
votes
1answer
34 views

Unable to access server using remote desktop and detect access point in controller software at the same time

I have following topology: I am not a networking expert but somehow using the help of the Internet I was able to successful configure my topology so that I can access the Server remotely from any ...
5
votes
1answer
643 views

pfSense - IKEv2 with EAP-RADIUS: Any fallback option if the RADIUS server is down?

I'm deploying an IKEv2 VPN authenticating against a RADIUS service within a pfSense 2.3-RELEASE box. But I'm afraid of the complications of this approach when the RADIUS server is down. Since the ...
1
vote
1answer
495 views

Windows cannot connect to Enterprise WPA2 WiFi access point with EAP-TTLS PAP authentication using freeradius

I was working on having an Enterprise WiFi access point where my clients need to enter username and password (which are in OpenLDAP directory), using AES, TTLS PAP. I setup my freeradius according to ...
2
votes
1answer
1k views

EAP-TLS for Wireless with Active Directory

My question is more from a conceptual point of view, rather than implementation (even though I'm asking about proprietary protocols and products). Assuming I have users and credentials set up in my ...
1
vote
1answer
891 views

802.1x Login Window profile fails because it “can't prompt for missing properties”

I'm trying to configure a TTLS 802.1x Login Window profile on OS X 10.10.1 Yosemite. The profile has been installed (via MDM) and the login window now shows (above the username/password input boxes) ...
3
votes
0answers
161 views

JBoss EAP 6.2 high availability without HTTP server

i'm looking for some solution to make a Jboss Cluster ( 2 nodes ) in H.A. ( 1 live, 1 backup) but i don't want to use a third element ( machine, service or whatever ). Most configuration I found uses ...
0
votes
1answer
4k views

EAP-PWD with FreeRADIUS 3

I'm trying to setup EAP-PWD using FreeRADIUS 3. However, I can't get it to work and documentation is virtually non-existent. Thus, I don't know whether the problem I'm running into is a ...
1
vote
1answer
280 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
0answers
265 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
3
votes
1answer
1k views

Why does Windows CA Server issue multiple certificates for the same user?

I am currently implementing an EAP/TLS WIFI implementation to replace our EAP/MSCHAP2 wifi implementation. I am using Windows Server 2008 and I've installed a certificate authority. User certificates ...
0
votes
1answer
370 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
3
votes
1answer
686 views

Is using EAP-MD5 in strongSwan a security risk?

Quoting Wikipedia: It offers minimal security; the MD5 hash function is vulnerable to dictionary attacks, and does not support key generation, which makes it unsuitable for use with dynamic WEP, or ...
0
votes
1answer
152 views

What decides what tunnels inside EAP-TTLS?

If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...
0
votes
0answers
2k views

Windows 7 client unable to connect to Cisco Wireless Access point

My windows 7 pc is unable to connect to Cisco's Aironet 1040 AP(autonomous) AP is configured to use EAP with local RADIUS server. AP debug messages indicates RADIUS server rejected Windows client ...
0
votes
1answer
237 views

LEAP vs EAP/TLS?

I am given a choice between: LEAP Wireless Client ID 802.1x (EAP/TLS) Wireless Client ID (Digital Certificates) To connect to a wireless network. What are the differences? Which one would you ...
0
votes
1answer
857 views

JBoss AS EAP versions - What parts of EAP source code are closed source?

Question about the source code for JBoss EAP versions 4 5 or 6. Let's say we decided to purchase JBoss EAP 6 from RedHat. Can we still run maven to build JBoss EAP version? Are there closed source ...
4
votes
2answers
4k views

What should I use instead of MS-CHAP v2?

There's a new tool and service that makes it very easy to break MS-CHAP v2, which is used to secure VPNs. A good summary of the attach against MS-CHAP can be found at Ars Technica. Here's the way I ...
5
votes
3answers
29k views

Troubleshooting Windows EAP/RADIUS connectivity issues

So, I guess the short version of the question is: I'm unable to get clients to connect to an enterprise-WPA wireless network after setting up a "new" NPS server and a new CA. After I manually ...
3
votes
1answer
4k views

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via ...