Lab Minutes Forum

Technical Discussion => Security => Topic started by: joyfulwind on June 21, 2015, 12:31:12 AM

Title: OpenLDAP and ISE
Post by: joyfulwind on June 21, 2015, 12:31:12 AM

Hi,

Do you know whether SE and OpenLDAP support EAP chaining ?

If not, do you know via which variable it would be possible to get the machine name, in order to verify that the machine name is stored in the LDAP database ?

Thanks !

Title: Re: OpenLDAP and ISE
Post by: MC on June 21, 2015, 10:46:55 PM

EAP chaining is just a method of how client perform 802.1x authentication which has nothing to do with which user database you use. Can you provide more specific information as far as which client OS you plan to use, and how it will perform machine authentication? What I am trying to get to is, if this is a Windows domain computer, the machine auth will occur automatically and the credential is known only between the machine and AD. But if this is something else, I am not sure how it will look up machine account in the LDAP database.