topic EAP-TLS and MS AD auth problem in Wireless

EAP-TLS and MS AD auth problem

philippe.denebourg — Sat, 03 Jul 2021 21:35:26 GMT

Hi,

I have a problem with an ACS to authenticate users with certificate on MS AD.

Working things:

PEAP authentication with the MS AD;

EAP-TLS authentication with the local DB.

Not working things:

EAP-TLS authentication with MS AD.

Because I'm able to auth users with PEAP on MS AD, I guess my config on MS AD is correct.

Because I'm able to auth users with certif in EAP-TLS, I guess my certif config is correct.

So, why it's not working with the combination EAP-TLS and MS AD.

I receive the error 'External DB Account Restriction'

Thanks for your help.

Re: EAP-TLS and MS AD auth problem

Wed, 12 Sep 2007 20:22:48 GMT

This issue is generally seens when there are multiple domains. Try out this step. Choose Network Connections from the control panel. Right-click the local area connection.Choose Properties. Double-click the TCP/IP option. Choose Advanced at the bottom. Click on DNS at the top. Choose Append these DNS suffixes. Add the FQDN for each domain that ACS authenticates against in the field.

Re: EAP-TLS and MS AD auth problem

philippe.denebourg — Thu, 13 Sep 2007 10:38:44 GMT

I did this and it doesn't work beter.

Phil.

Re: EAP-TLS and MS AD auth problem

scottcraig — Mon, 09 Mar 2009 20:30:52 GMT

I know this thread is old but I am very curious if you found an answer to this. I am in the exact same situation and have verified and reverified everything based on every ounce of documentation I can find. This is driving me crazy so if you found a solution I would love to hear what it was.

-Scott