Security

Reply
Contributor I
Posts: 34
Registered: ‎01-02-2014

EAP-TLS authentication with Authorization Request enalble

I am using EAP-TLS authentication on Clearpass. If Icheck Authorization Request as enable, the EAP-TLS authentication will fail. If I uncheck Authorization Request, the EAP-TLS authentication will pass. Can someone tell me what the Authorization Request really does please?

Thank you.

 

Guru Elite
Posts: 7,839
Registered: ‎09-08-2010

Re: EAP-TLS authentication with Authorization Request enalble

It's used to validate against another authentication source. The Onboard respository for example.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Guru Elite
Posts: 19,972
Registered: ‎03-29-2007

Re: EAP-TLS authentication with Authorization Request enalble

It checks the username on the certificate with a database like AD to ensure it exists.

 

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Contributor I
Posts: 34
Registered: ‎01-02-2014

Re: EAP-TLS authentication with Authorization Request enalble

Many thanks, Tim, for your reply. It is Authorizaton Request as its name indicates. Why do you say it is another authentication?

 

Guru Elite
Posts: 7,839
Registered: ‎09-08-2010

Re: EAP-TLS authentication with Authorization Request enalble

In many cases, authentication sources are used as authorization sources....


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 34
Registered: ‎01-02-2014

Re: EAP-TLS authentication with Authorization Request enalble

Though the username (CN on the certificate) is in AD, why I still cannot pass the EAP-TLS authentication with Authorization Request checked?http://community.arubanetworks.com/t5/forums/replypage/board-id/aaa-nac-guest-access-byod/message-id/22993#

Many thanks!

Search Airheads
Showing results for 
Search instead for 
Did you mean: