802.1x, deault windows supplicant and kerberos

[Phil Mayers]

On 18/06/12 10:06, Adrian Czapek wrote:
> 2012/6/18 Alan DeKok <aland at deployingradius.com
> <mailto:aland at deployingradius.com>>
>
>
>     Change the supplicant to use EAP-GTC. That might work.
>
>     Otherwise, it's impossible.
>
>
> Thanks,
> just found this:
> http://fuhry.us/blog/2012/01/01/mschapv2-against-mit-kerberos-yes-you-can/
> but that requires to patch kerberos which probably I won't be allowed to do.

Important note for the archive: this only works if you are using MIT 
Kerberos as your KDC, and can patch your KDC. It does NOT work for 
Active Directory.