Wireless Access

Reply
Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Wired Dot1X and PEAP

Hi friends!

 

I have a CPPM but not added to the domain (I got AD defined in to do a bind)

 

I get this error with my wired dot1x anyone come across this?

 

winbind.png

Guru Elite
Posts: 8,337
Registered: ‎09-08-2010

Re: Wired Dot1X and PEAP

What privileges does your bind account have in AD?

You should really join CPPM to the domain.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Re: Wired Dot1X and PEAP

yep you are right I know, well I got this "political problem" there are you using wired dot1x where you are?

Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Re: Wired Dot1X and PEAP

oops - not sure what privilidges the account has need to check with wintel guys

Aruba
Posts: 1,643
Registered: ‎04-13-2009

Re: Wired Dot1X and PEAP

CPPM has to be joined to the domain to read the MSCHAPv2 credentials....wired or wireless authentications.

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Re: Wired Dot1X and PEAP

Thanks all very much appreciated!
Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Re: Wired Dot1X and PEAP

So am I right in thinking this is a kerberos thing?
Aruba
Posts: 1,643
Registered: ‎04-13-2009

Re: Wired Dot1X and PEAP

It is just the way AD stores the user passwords .  Because of this, joining the domain is necessary in order to interpret/read it.  

 

If you're having "political" issues joining the domain, tell your administrators that they can join it to the domain for you.  The account and credentials used to join it to the domain are only used during the join.  Subsequent logon authentications are done with the bind account.  This account can have minimal rights in AD; typicaly configured as a "normal user".  

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Regular Contributor I
Posts: 170
Registered: ‎03-18-2013

Re: Wired Dot1X and PEAP

Thanks for the advice and understanding, it never ceases to amaze me how sometime people resist change but there you go!
Search Airheads
Showing results for 
Search instead for 
Did you mean: