Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-28 Thread Heikki Vatiainen
On 08/28/2015 06:35 PM, Ullfig, Roberto Alfredo wrote: > I don't know if this is the same issue we had. It was trivial to get > an 802.1x error on my non-AD laptop (for some reason I could not get > it to fail with my account on an AD connected laptop). Yes, this is the case I was referring to

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-28 Thread Ullfig, Roberto Alfredo
2015 6:06 AM To: radiator@open.com.au Subject: Re: [RADIATOR] PEAP internal session resumption breaks some clients On 28.8.2015 12.22, Alan Buxey wrote: > I would suspect either wireless controller problems (eg related to > 802.11k or such) or client misconfiguration (do you have a deployment

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-28 Thread Heikki Vatiainen
On 28.8.2015 12.22, Alan Buxey wrote: > I would suspect either wireless controller problems (eg related to > 802.11k or such) or client misconfiguration (do you have a deployment > tool for the 802.1X or do users just click on SSID and enter their > status? ) I plan to dig more into the fast reco

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-28 Thread Heikki Vatiainen
On 28.8.2015 5.44, David Zych wrote: > Total speculation here: I get the feeling that Microsoft might take a > different view of this, which might even make sense if we consider that > MS-CHAP-V2 was intended to provide *mutual* authentication (i.e. just > because we're willing to give the client

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-28 Thread Alan Buxey
Should be no problem with session resumption being on by default. Certainly its a performance impact of you don't have it on. I would suspect either wireless controller problems (eg related to 802.11k or such) or client misconfiguration (do you have a deployment tool for the 802.1X or do users

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-27 Thread David Zych
On 08/27/2015 02:40 AM, Heikki Vatiainen wrote: > On 27.8.2015 9.32, David Zych wrote: >> We have a Windows 7 client that in certain locations around campus >> periodically gets booted off wireless and prompts the user to >> re-enter his credentials. > > Thanks for the information. A couple of ques

Re: [RADIATOR] PEAP internal session resumption breaks some clients

2015-08-27 Thread Heikki Vatiainen
On 27.8.2015 9.32, David Zych wrote: > We have a Windows 7 client that in certain locations around campus > periodically gets booted off wireless and prompts the user to > re-enter his credentials. Thanks for the information. A couple of questions and comments related to this: first, is this jus

[RADIATOR] PEAP internal session resumption breaks some clients

2015-08-26 Thread David Zych
We have a Windows 7 client that in certain locations around campus periodically gets booted off wireless and prompts the user to re-enter his credentials. Each time this happens, my normal RADIUS logs show: 2015-08-26T21:57:09.002570-05:00 radius1.cites.illinois.edu radius.auth2[36852]: [wirele