802.1x and domain authentication

[Guest Westcort]

Hello everyone

Currently I am trying to implement 802.1x in our test environment.

Currently I am using a Dell PC6224 switch as the authenticator and

using a win2k3 IAS server which is part of my test domain. I am using

EAP-MSChapV2.

I am using Window XP to test my setup and 802.1x authentication seems

to work when i manually enter the username/password/domain name when

the network icon ask for a password.

When trying to log in from the login screen from XP it seems to not be

able to authentica correctly and would not allow my test user to

login.

Upon checking my IAS log it seems that XP seems to be authenticate the

local account instead of the domain account. And since the local

machine name is not the name of my domain. It would fail

authentication.

For example if my Domain name is Fun2100 and my machine name is west

then it would send the password and user name as west instead of

fun2100 even when the domain is selected correctly.

There was a post earlier that mention this might be a bug but there

was no follow up.

Does anyone know how to solve this issue, or if this is a bug that

microsoft still haven't fixed?

Thanks!

[Guest Westcort]

On Jan 5, 4:54 pm, Westcort <Ken2...@gmail.com> wrote:<span style="color:blue">

> Hello everyone

> Currently I am trying to implement 802.1x in our test environment.

> Currently I am using a Dell PC6224 switch as the authenticator and

> using a win2k3 IAS server which is part of my test domain. I am using

> EAP-MSChapV2.

> I am using Window XP to test my setup and 802.1x authentication seems

> to work when i manually enter the username/password/domain name when

> the network icon ask for a password.

> When trying to log in from the login screen from XP it seems to not be

> able to authentica correctly and would not allow my test user to

> login.

> Upon checking my IAS log it seems that XP seems to be authenticate the

> local account instead of the domain account. And since the local

> machine name is not the name of my domain. It would fail

> authentication.

> For example if my Domain name is Fun2100 and my machine name is west

> then it would send the password and user name as west instead of

> fun2100 even when the domain is selected correctly.

> There was a post earlier that mention this might be a bug but there

> was no follow up.

> Does anyone know how to solve this issue, or if this is a bug that

> microsoft still haven't fixed?

> Thanks!</span>

 

can anyone tell me which microsoft group is dedicated to the 802.1x

radius issue?