Re: Chromebooks, FreeRADIUS and Google Workspace (i.e. G Suites) for 802.1X.

On 22 August 2022 22:47:00 BST, Robert Montgomery <rob@gsuites.rnav.net> wrote:

I think the root cause of the issue is FreeRADIUS' need to get an unencrypted copy of the password. Because Google Workspace encrypts the user's passwords, authentication only works if the client sends an unencrypted password to FreeRADIUS.

Exactly.

To do that, it needs to support the EAP-GTC method. And, while most clients support EAP-GTC, Chromebooks do not.

Am I missing something? Has anyone figured out a way to use 802.1X to authenticate Chromebooks against Google Workspace LDAP?

EAP-TTLS/PAP Whether Chromebooks support it or not, I have no idea. But that's what everyone else has to do. -- Matthew