Microsoft AD group check

[Alan DeKok]

> On Jan 12, 2020, at 12:38 PM, Olivier Mahieu <o_mahieu at hotmail.com> wrote:
> 
> Does this also work with PEAP-MSCHAPv2?

  VLAN assignment has nothing to do with PAP / CHAP / PEAP / etc.  So yes, it works.

> Meaning in /sites-available/default, Auth-Type LDAP is disabled.

  You can't use that for EAP.

> Looking for a solution for dynamic VLAN assignment with PEAP/MSCHAPv2.

  It works.    Just try it.

  For PEAP, put the VLAN assignment into the "post-auth" section.  There's no reason to have it anywhere else.

  Alan DeKok.