Freeraius vs NPS

[Alan DeKok]

> On May 4, 2017, at 9:21 PM, Martin, Jeremy <jmartin at emcc.edu> wrote:
> 
> I partly agree, I agree that there are things going on but the part that points to the server having something to do with it is the fact that everything left the save, phone, switches, switch configuration yields a different result only when the radius server is changed so this leads me to believe there must be a difference in some value passed,

  As I said... there are a *lot* of things going on with EAP.  It's not as simple as "some value".  It's a whole set of protocol suites, and a whole set of negotiation.

  The short answer is that the end system *should* prompt for credentials on first login.

  After that, you'll probably need to configure MS-CHAP change password.  Which means upgrading to 3.0.13.  The functionality is documented in raddb/mods-available/mschap.

  Alan DeKok.