EAP-FAST / ACS v3.2 password expiry has problems

[ken.scheck]

We’ve deployed several mobile workstations on carts in a hospital:

Neoware (Thin Client) w/Citrix with Aironet PCI cards (both 802.11b & g)

The security is EAP-FAST

Cisco Aironet 1200 AP’s running V12.2(13) JA1

The AP is communicating to a Cisco ACS server v3.2 configured for EAP-FAST

The ACS syncs up with the NT Authentication server

Things work fine for a while, then when the password expires the user is locked out of their account.

[radiomen]

What wireless client are you using on the pc?

[ken.scheck]

Some of our Dell laptops use the integrated Intel Wireless Pro, but for these mobile carts it's a thin client Neoware, with a PCI Bus Cisco 802.11g antenna, and this does use the Cisco Aironet Client Utility.