Authentication ACS LDAP PEAP ?

[s.berthier]

Hello

Could you tell me if its possible to do 802.1X authentication with LDAP server using PEAP MS-CHAP v2 (Machine autentication) ?

in fact, with Windows external database, its work fine.

We use only machine authentication with vlan assignement over PEAP.

Another think, we wan't to use Mac authentication Bypass for printers or other laptop... but we wonder if it could be work with an external Windows database or LDAP ?

Thanks for your help

[darpotter]

No this isnt possible as LDAP servers do not support MSCHAP v1 or v2.

You'd need something that can carry a plain text password inside the EAP tunnel - like EAP-GTC

[s.berthier]

Thanks for your help