EAP-TLS with Novell NDS

[l.kellett]

I have a Novell NDS v5 environment, Stand alone Win 2003 CA, ACS 3.2 Appliance and 1200 AP's.

I have installed a certificate on the ACS and on the client, but when I try to authenticate, the ACS logs a failed attempt 'Auth type not supported by External DB'

All the documentaion I have read, states that you can use Novell NDS Database for EAP-TLS.

Is it possible that I need to upgrade to Novell NDS v6 ?

[scottmac]

You may need to add / point to a cert in the NDS database.

I know there's an option in MS AD for specifying a cert for each user object.

If you use only the ACS (no NDS) do the clients authenticate ok?

IIRC, the certificate is used in lieu of a username and password;there'd need to be some way to associate the cert from the client to a username in the directory.

I haven't played with it yet (or read about it), so I'm just offering a suggestion off the top of my head. If I get a chance, I'll check it out in the Lab at work and let you know.

Good Luck

Scott