Re: Chromebooks, FreeRADIUS and Google Workspace (i.e. G Suites) for 802.1X.

[Matthew Newton]

On 22 August 2022 22:47:00 BST, Robert Montgomery <rob at gsuites.rnav.net> wrote:
>I think the root cause of the issue is FreeRADIUS' need to get an
>unencrypted copy of the password. Because Google Workspace encrypts the
>user's passwords, authentication only works if the client sends an
>unencrypted password to FreeRADIUS.

Exactly.

> To do that, it needs to support the
>EAP-GTC method. And, while most clients support EAP-GTC, Chromebooks do not.
>
>Am I missing something? Has anyone figured out a way to use 802.1X to
>authenticate Chromebooks against Google Workspace LDAP?

EAP-TTLS/PAP

Whether Chromebooks support it or not, I have no idea. But that's what everyone else has to do.


-- 
Matthew