Cisco WLC PEAP/MSCHAPv2 - unnecessary ldap lookups?

[Ivan Kalik]

> I will need to do some more research on inner-tunnels, as i'm not too
> familiar with them.

Well it's right beside default server in sites-enabled.
> How would I add the ldap components?

You should comment it in there and commet it out in default virtual server.

>  as part of the
> peap module itself?

No.

> All the documentation i've found on LDAP requires the ldap modules to be
> referenced in both the authorize and authentication sections directly.

You do need it in authorize but not authenticate (you can't do ldap "bind
as user" authentication for peap). Just pass the password from ldap to
radius for authentication.

You didn't copy 1.x configuration files to 2.x server by any chance?

Ivan Kalik
Kalik Informatika ISP