<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0">
<TITLE>EAP problem</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hello list,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I have freeradius configured to authenicate users against active directory with ms-chap and can also do ldap group searches, all that is working great. Now what I need to do is implement 802.1x port authenication on our foundry switches and I'm running into problems. This is our layout:</FONT></P>
<BR>
<P><FONT SIZE=2 FACE="Arial">W2K Pro (using MD5-Challenge) -----> Foundry Switch -------> Freeradius --------> AD</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I have read a lot of articles/post on the web and looked over the docs (I don't know how many times) and I think I'm more confused than ever. So the first question is:</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Is this setup even possible?</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I did get EAP to work when I supply the User-Password attribute in the users file, but I would like LDAP to fetch this if it is possible. I came across a post suggesting this, but the answer was not very clear. If I remove the User-Password attribute in the users file, the dubug out shows: User-Password is required for EAP-MD5 authenitication.</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Another question I would like to ask is: When you configure the workstation (supplicant) for MD5-Challenge, it prompts you for:</FONT></P>
<P><FONT SIZE=2 FACE="Arial">Username</FONT>
<BR><FONT SIZE=2 FACE="Arial">Password</FONT>
<BR><FONT SIZE=2 FACE="Arial">Domain</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">If you supply all three values, the debug shows:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Identity does not match user-name</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">But if you leave the domain field blank, it works (providing that User-Password attribute is in the user file).</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I hope these questions make sense and hopefully someone out there can help.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">-Robert Graham</FONT>
</P>
<BR>
</BODY>
</HTML>