Hello

Wondering if there is anyway to tell the ACS to tell the client to prefer a particular EAP type inner method.

For example first try PEAP-GTC to authenticate against Novell eDirectory store, if the client is a windows device then try using PEAP-MSCHAPv2 then authenticate against an AD store

currently I have created an identity store that lists Novell eDirectory first and then AD, but it seems that the client negotiation prefers clients to try PEAP-MSCHAPv2

Any thoughts on the matter would be appreciated

Thanks MC

there does not be a easy way to do it.

For Aruba clearpass and freeradius I found options with ldap over ssl
had allow the bind user to retrieve password in the universal policy in edirectory
checked Allow bind using user password
Password Attribute: nspmPassword
Password Type: cleartext

But can't seem to find a similar option for ACS

Cheers