Sorry, I was not clean with my setup information.  We do not have a domain, these are stand alone windows 7 devices.  We also have some tablets and some linux boxes.  Concern right now is the Windows 7 devices.  I didn't know that you cannot do machine authentication without a domain....

User authentication in my environment is just not an option because all of the devices need to have a connection to the network at all times even if nobody is logged in.  Should I be using PEAP/EAP-TLS instead?

If so do you know of any good setup documentation for that?

Dan.


On Fri, Dec 7, 2012 at 11:42 AM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,


you probably want to set peap as your default EAP type in eap.conf to save s couple of packets and a NAK.

I don't see the ntlm_auth being called, have you edited the mschap module?

The host name is rather short....are you sure this host is bound into an AD?


alan