Security

Hi all,

Simple question I think.....

Can ClearPass use LDAP as an authentication source where it simply does an authentication bind as the wireless user with their provided cleartext password?

It looks like my current config actually pulls down the user's password (ntlm encrypted) as part of its authentication process. Is it doing that so clearpass itself can decide if the users password matches that ntlm has?

I'd much rather clearpass not retrieve or store user passwords.

Possible?

ClearPass does not store user credentials unless you’re using ClearPass as the identity store.

Using generic LDAP requires the use of EAP-TTLS or PEAPv1/EAP-GTC which requires either a custom supplicant or configuration profile to be installed on many platforms.

EAP-TLS is the only recommended secure EAP method today.