No only internal users. If i need to install a certificate per devicr i can just configure the users in the user file. The idea of ldap was to make things simple when a user leaves the company or a new user joins. But i think its just easier to create a password for each user in the network rather than to modify the ldap and maybe cause other issues. The idea is to secure the internal wifi rather then just use psk-wpa2. On Wed, Nov 14, 2018, 22:16 Alan Buxey <alan.buxey@gmail.com wrote:
hi,
Do i need to use mschap for windows connection to wifi via freeradius and
openldap?
with latest versions of Windows you can use EAP-TTLS/PAP - for older versions you'd need to install an extra supplicant to have that option. other OSes have EAP-TTLS/PAP available to them.
or you can use certificates.... whats the purpose/customers etc?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html