-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Here at UPenn we use Kerberos for our backend authentication, using
EAP-TTLS-PAP. We also use Radiator as our backend RADIUS server.
The built-in Mac OS X supplicant (Internet Connect) works swimmingly.
We have been piloting third-party software for Windows clients, since
the built-in Windows supplicant doesn't do TTLS. Our experience has
been that we have had lots of problems getting the Meetinghouse Aegis
supplicant to work, but have found that the open source SecureW2
client (www.securew2.com) seems to work much better.
- --
Jon Moore
ISC Networking & Telecommunications
University of Pennsylvania
On Sep 15, 2005, at 2:46 PM, Wyman Miles wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We're about to pilot an 802.1x project for one of the larger
departments on
campus and I had a few questions for the universities who've gone
before:
- - is anyone using Kerberos as an authentication resource for your
wireless
clients. Any pitfalls? Did you have to distribute a 3rd party
supplicant
for the Windows clients?
- - is anyone using ActiveDirectory as an authentication resource?
- - who's using native 802.1x supplicants versus who is distributing
additional software? Of the latter group, any recommendations? (my
personal leanings are Funk's 802.1x supplicant mated with the Open.com
Radiator RADIUS server).
Thanks for the feedback!
Wyman Miles
Senior Security Engineer
Cornell University, Ithaca, NY
(607) 255-8421
-----BEGIN PGP SIGNATURE-----
Version: Mulberry PGP Plugin v3.0
Comment: processed by Mulberry PGP Plugin
iQA/AwUBQynBasRE6QfTb3V0EQJHKACeOvnuJeBfY3tzU9IyDnMHNzvcIkwAn3fj
ujGVkElKhJx1/6nFnhBR1r9o
=eEo2
-----END PGP SIGNATURE-----
**********
Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at http://
www.educause.edu/groups/.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
iD8DBQFDKcXVx8TaElR3qMMRAs50AKCAFpdPOk9epcwv3KPWEAHgg0hdggCgkW/2
tPE+yxpENhlpYpSbBtqc4jA=
=jBbc
-----END PGP SIGNATURE-----
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
