<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Can you please send steps, I am also
trying to so the same.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Rakesh<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>rick wiltshire<br>
<b><span style='font-weight:bold'>Sent:</span></b> Sunday, September 23, 2007
4:48 PM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">freeradius-users@lists.freeradius.org</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> Support for SSO Active
Directory & PEAP-MS-CHAP-v2</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
Dear All,<br>
<br>
I need help with dot1x implementation in an Enterprise LAN. Our target is to
authenticate and authorize users based on their identities (domain user names)
as well as applying GPOs on users.<br>
<br>
Our authentication Backend is: Active Directory <br>
Our Authorization & Accounting is done by: freeRADIUS<br>
Authorization Attributes control VLAN assignment (hence, IP address pool)<br>
Required Authentication EAP-Type : PEAP & MS-CHAP<br>
<br>
All Clients are using WinXP supplicant. I managed to implement PEAP&MS-CHAP
with this setup however with users who have cached credentials on their PCs. If
the user logs on the PC for the first time, he fails to reach the active
directory to authenticate since the connection is not yet authorized. So what I
need is get the computer authenticated and assigned an IP address and then
authenticate the user in a following phase while the connection is up. <br>
<br>
Any clues with authenticating domain machines using freeradius and active
directory implementation? <o:p></o:p></span></font></p>
</div>
<P><FONT face=Verdana size=2><STRONG><FONT
color=#ff0000>Attention:</FONT></STRONG> <BR>Any non-official business related
views, opinions and other information presented in this electronic mail are
solely those of the sender/author. Burgan Bank does not endorse or accept
responsibility for their opinions. If you are not the addressed indicated in
this mail or responsible for delivering this message to the intended, you should
delete this message and notify the sender
immediately.<BR>-------------------------------------------------------<BR><FONT
face=Arial color=#0080c0 size=4>Burgan Bank </FONT><FONT color=#0080c0
size=1>S.A.K</FONT><BR></FONT><A href="http://www.burgan.com"><FONT face=Verdana
size=2>www.burgan.com</FONT></A></P>
</body>
</html>