EAP authentication against Novell eDirectory database

[depwanguy]

Does anyone have any information/documents on how to get EAP-GTC authentication against a Novell eDirectory database? The ACS docs do not mention that LDAP is required to get this working, just the Novell Client, but several posts here state that a working LDAP server is required.

Thanks in advance for your help!

[mikeb]

Novell recently released documentation on integrating FreeRadius with eDirectory for 802.1x wireless security.

http://forge.novell.com/modules/xfmod/project/?edirfreeradius

http://www.novell.com/documentation/edir_radius/index.html

[depwanguy]

Thanks for the reply and the information, but I need to get eDirectory authentication working with the Cisco ACS RADIUS server. I'm having a heck of a time getting digital certificates to work.

[mikeb]

I heard a RUMOR (never tested my self) that the only way you can get this to work is to install the NW Client on your ACS. This is only possible if you have the Windows version and not the appliance.

If you are going to try it, be sure to take an image of your system first, I can't predict what will happen.

Let me know if you brave this path.

[depwanguy]

Have already installed the NW client on it (call me brave or stupid!)

The problem is I'm not getting this far. I'm still having issues with the digital certificates, which I have another post on.

Once I get my SSL/TLS authentication fixed, I'll try the eDirectory authentication. I will post any successes/failures here.

[depwanguy]

OK, got the certificates fixed. You must use Windows 2003, ENTERPRISE EDITION, not the Standard Edition, to create and distribute customized web server certificate templates. The eDirectory authentication worked great after this was resolved.