LDAP authentication with EAP-Fast

azeindler · ‎08-13-2007

I try to configure the controller (4.1.181.0) to authenticate users directly through LDAP. EAP-Fast with local authentication with PAC or Certificates works well. When I try to disable local authencation and go directly through the LDAP server, the client didn't get any ip address. Does someone have a working installation with LDAP and EAP-FAST and could give my a hint?

azeindler · ‎08-14-2007

I'll open a tac case for this problem.

anderson.barbosa · ‎08-14-2007

I have the controller (4.1.171.0) and the same problem!!!

azeindler · ‎09-03-2007

I know now the problem. WLC try to connect with "anonymous bind" to the ldap server. It works well with Win2000. With Win2003 it works only if you open the security. See link: http://support.microsoft.com/kb/320528/en

You haven't the possiblity to configure any username/pwd for a secure ldap query. It's something that is an absolutely need for many customers.

For the moment I will sugest the "workaround" with AP->WLC->Radius->LDAP

Kind regards

Alex