Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread John Allman
Stefan Winter wrote: >> I'm searching through my dell wireless wlan card utility and i'm pretty sure >> i can't hide it. Are dell breaking any rfcs or other standards that i can >> take them up on? > > No. It's optional. If Dell doesn't do it, bad luck. But you can always > install > a supplica

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread John Allman
Stefan Winter wrote: > > The thing about anonymous outer identity is that it doesn't matter what you > put in there. If your real name is "iamcool" and your password > is "evencooler" you can happily send "foobar" as Identity. Authentication > will only depend on what's inside the tunneled PAP r

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-06 Thread John Allman
[EMAIL PROTECTED] wrote: >> The EAP-Message doesn't appear to be encrypted on the initial packet >> from the ap to the server. Inside i see Type and Identity (containing my >> username. The username is also in the User-Name attribute) >> > > that'll be your outer identity... which, as it is pl

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-06 Thread John Allman
[EMAIL PROTECTED] wrote: > "captive portal" - there are several software tools that will do this... > eg http://en.wikipedia.org/wiki/Captive_portal > > most people seem to be moving away from this method as it is riddled with > possible security compromises. > Thanks for the heads-up. I'll tak

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-06 Thread John Allman
Stefan Winter wrote: > You need to differentiate two parts of the link: a) the data that is passed > between the client device and the RADIUS server and b) the backend > communication between RADIUS server and LDAP. > > a) is encrypted when using EAP-TTLS > b) may or may not be encrypted, depend

EAP-TTLS/PAP -> LDAP for WPA2

2006-07-06 Thread John Allman
: http://homepage.mac.com/andreaswolf/public/wpaeap.html including using the xpextensions mentioned there. I generated my random file using dd and /dev/urandom. I am a little lost and don't know what is best practice. Any advice would be appreciated. I've tried googling but haven't fou