RE: PEAP w/MS-CHAPv2:: Wireless Authentication against Windows AD as user profile storage

[Steve OBrien]

>If userprofile is on LDAP I think it would work since
>LDAP bind/search would return userPassword attribute,
>where as AD does not.  Thus CHAP cannnot be done in AD
>case. Is this true ?

Does anyone know how the LDAP lookup works against AD?  Does it actually get the password (doubtful) or does it just attempt to bind with provided username and password and positively authenticate based upon a successful bind?


Steve