RE: VLAN assignment to HP Switch with 802.1x client

2013-08-09 Thread Shaw, Colin M.
> > You could move "files" above "eap" but IMO it's better (cleaner, more > obvious) to run this in post-auth like so: > > authorize { >... >eap { > ok = return >} >... > } > post-auth { >... >files >... > } > > Note that you'll need to set the "postauth_usersfile"

VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Shaw, Colin M.
Hi, I'm in the process of attempting to move our 802.1x services off of an aging freeRADIUS (v1) server onto a newly built server running freeRADIUS v2.2 Tests so far with wireless clients using 802.1x PEAP/MS-CHAPv2 are working ok. Clients can authenticate (against AD) and be assigned the diff