Sunday, March 17, 2019

802.1x computer base certificate issues

Hi,

We are currently rolling out 802.1x authentication using EAP-TLS and have noticed issues when some users have to re authenticate and they send their username with 'host/' prepended. The username/CN is made up of the [hostname@xx.com](mailto:hostname@xx.com) however when the reauth occurs some computers send through host/hostname@xx.com which our radius server (Cloudpath) will respond with a REJECT response. They will 5-10 minutes later attempt to re-authenticate again, and eventually will send through their username/CN correctly which any intervention.

Has anyone seen this issues before? currently the issues appear to be with random Windows 7 and 10 computers.

Thanks



No comments:

Post a Comment