All-
Philippe alluded to the Internet2 effort underway to address federated wireless authentication. This begins to address guest access, as many additional users would no longer be completely unknown. Most AP vendors these days provide substantial capabilities for per-user ACLs or limitations that can be applied through your authz system, so authn would not limit your ability to enforce guest controls. These are all interesting topics that we'd like to investigate..
-- The Internet2 SALSA-NetAuth working group[1] is currently developing solutions to the "roaming scholar" problem for authenticated network access. Dubbed "Federated Wireless NetAuth" (FWNA), the group seeks to begin a live pilot project in the near future while engaging longer term development efforts to solve identified problems. For a view of the group's draft roadmap, visit link [3] below.
Imagine a world where your home authentication credentials were all you needed to login to the wireless network at the University down the road, across the country, or on the other side of the globe. Imagine not needing to create guest IDs in your identity management system. In parts of Europe, this is already a reality. [4]
We are currently looking for network architects, engineers, or developers interested in contributing time and energy to developing solutions to problems in this space. The group has bi-weekly conference calls to discuss the activities, with various work in the intervening weeks.
If you're interested, visit the website[1], join the mailing list, and watch for the next conference call announcement. We look forward to hearing from you.
[1]: http://security.internet2.edu/netauth [2]: http://security.internet2.edu/netauth/#FWNA [3]: http://www.duke.edu/~kcmiller/fwna-roadmap-0.2.pdf [4]: http://www.eduroam.org --
-Kevin
Kevin Miller [EMAIL PROTECTED] Network Architect Office of Information Technology Duke University
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
