<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title></title>
<style type="text/css">
<!--
body{margin-left:10px;margin-right:10px;margin-top:10px;margin-bottom:10px;}
-->
</style>
</head>
<body marginleft="10" marginright="10" margintop="10" marginbottom="10">
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">Will that allow successful RADIUS authentication - and, therefore wireless access - before the password change is initiated? Because our clients are Macs that won't prompt for password change until after they are connected to the wireless and authenticating against AD.</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">Alan DeKok Wrote:</font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">Jason Agress wrote:</font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">></font><font face="Courier-Oblique" size="+0" color="#000000" style="font-family:Courier-Oblique;font-size:13pt;color:#000000;"><i> I've read lots about this problem with FreeRADIUS and have seen some</i></font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">></font><font face="Courier-Oblique" size="+0" color="#000000" style="font-family:Courier-Oblique;font-size:13pt;color:#000000;"><i> implied solutions, but nothing concrete. So here's my question: With</i></font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">></font><font face="Courier-Oblique" size="+0" color="#000000" style="font-family:Courier-Oblique;font-size:13pt;color:#000000;"><i> FreeRADIUS, is there a way to allow successful RADIUS authentication</i></font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">></font><font face="Courier-Oblique" size="+0" color="#000000" style="font-family:Courier-Oblique;font-size:13pt;color:#000000;"><i> with an expired password? This way the AD login process can commence and</i></font></div>
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;">></font><font face="Courier-Oblique" size="+0" color="#000000" style="font-family:Courier-Oblique;font-size:13pt;color:#000000;"><i> the user can be prompted to change his/her password wirelessly.</i></font></div>
<br />
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;"> Use the git "master" branch. It supports changing passwords via PEAP.</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;"> See raddb/mods-available/mschap</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Courier" size="+0" color="#000000" style="font-family:Courier;font-size:13pt;color:#000000;"> Alan DeKok.</font></div>
</body>
</html>