Help with 802.1x wifi profile

Hi All,
I am in a bit of a bind. I have been tasked with creating an 802.1x profile for Lion and up machines based on the profiles we use for our Windows machines and I have not been able to get this to work. Our radius server is Win 2K8 R2 based, and uses various AD based methods for authentication.
Radius needs the following:
- Microsoft: Protected EAP (PEAP)
- TLS (for MSCHAPv2 settings)
PEAP Properties
- Validate server certificate
- Authentication Method: EAP-MSCHAPv2 with Fast-Reconnet enabled
MSCHAPv2 will use the user's AD credentials.
Radius also requires that machine be found in AD. Our CA admin has given me certs to add to the macs for this portion.
I guess I am just very confused as to what info goes where. I've had a look at this:
http://www.revolutionwifi.net/2012/02/mac-os-x-lion-creating-wi-fi-8021x.html
but I still can't figure this out.
Can anyone provide any guidance on setting up 802.1x in this kind of a scenario?
Thanks!

The official documentation is below. I don't know anything that isn't in that document.
http://training.apple.com/pdf/WP_8021X_Authentication.pdf

Similar Messages

Windows 7 802.1x wifi profile issue with cached credentials

We have a wireless network that is setup as WPA2-Enterprise AES using 802.1x. We have a user that is constantly having his account locked out. When we trace where it's coming from, it's from our
radius server (which is only used for this one wireless network). We have already deleted the profile and recreated it. If we uncheck the option to remember the username/password, and enter that manually at prompt, it connects fine. As soon as we check that
option back, it fails and will keep failing and eventually lock out his acocunt. We have recreated his user profile and the wifi profile with no luck. I've done the following http://security.stackexchange.com/questions/15574/how-do-i-clear-cached-credentials-from-my-windows-profile
but to no avail. There are no credentials listed when I go this route. Can someone shed light as to where it is hiding these credentials?

Hi
Maybe change settings on RADIUS server to allow more than 5 successive login attempts.
If you look at the windows security log on the radius server can you see if it giving errors of bad username or password?
Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

802.1X WiFi profiles

Hi,
I recently upgraded my Late 2011 Macbook Pro 17" to the 10.7.3 and since my WiFi profiles have disappeared. The reason I set up profiles is because I have to go via a proxy at work, and at home my router connects straight to the internet.
I have imported the profiles again and Lion seems to use everything except the proxy settings. The profiles were created using iPhone Configuration Utility 3.5 and they work perfectly on my iPhone.
I have reset the PRAM and SMC and also reinstalled the combo update for 10.7.3.
Does anyone know how to solve this issue, or how to make the make switch between using the proxy and not, without me having to do anything?
Thanks

Any feature requests you have should go here: www.palm.com/feedback. Thank you for taking the time and wanting us to improve.

I need help with an email WiFi sending problem on my iPad 2

I’m having an email WiFi sending problem on my iPad 2     Model: MC774C/A; IOS VERSION: 6.1.3 (10B329).
While I use 4 email accounts on the iPad -- Hotmail, Gmail, iCloud and ns.sympatico.ca ( a division of BellAliant) – the sending difficulty only relates to the ns.sympatico.ca. The settings for this account are:         pop.bellaliant.net            and      smtp.bellaliant.net
I first noticed the problem about 3 weeks ago while travelling across the country (Canada). (I do recall about that time there was an update of my IOS and I also for my wife purchased from the Bell store an iPhone which shares my Apple account.) Prior to that everything worked well for a couple of years.
I noticed earlier this month that the iPad received mail fine but would not send at night using the motels’ WiFi. During the day, using my 3G account, all worked fine. I phoned Bell but was told that my experience was normal so I thought no more about it until I returned home and found the same problem at the house. I called Bell again and worked for 2 hours with 3 Bell technicians who succeeded in getting the iPad to neither send nor receive and gave up advising me to take the iPad into a Bell store to have it looked at. I did that and the young technician got the iPad sending and receiving by changing the        smtp.bellaliant.net      to         mail.1xbell.ca
However, when I returned home again, I realized that it was working on my 3G and still doesn’t send on my WiFi
I’m looking for any suggestions that might solve this annoying problem?

iOS: Unable to send or receive email
http://support.apple.com/kb/TS3899
Can’t Send Emails on iPad – Troubleshooting Steps
http://ipadhelp.com/ipad-help/ipad-cant-send-emails-troubleshooting-steps/
Setting up and troubleshooting Mail
http://www.apple.com/support/ipad/assistant/mail/
Server does not allow relaying email error, fix
http://appletoolbox.com/2012/01/server-does-not-allow-relaying-email-error-fix/
Why Does My iPad Say "Cannot Connect to Server"?
http://www.ehow.co.uk/info_8693415_ipad-say-cannot-connect-server.html
iOS: 'Mailbox Locked', account is in use on another device, or prompt to re-enter POP3 password
http://support.apple.com/kb/ts2621
iPad Mail
http://www.apple.com/support/ipad/mail/
Configuration problems with IMAP e-mail on iOS with a non-standard SSL port.
http://colinrobbins.me/2013/02/09/configuration-problems-with-imap-e-mail-on-ios -with-a-non-standard-ssl-port/
Try this first - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
Or this - Delete the account in Mail and then set it up again. Settings->Mail, Contacts, Calendars -> Accounts   Tap on the Account, then on the red button that says Remove Account.
 Cheers, Tom

Help with creating a lens profile

I am looking to create a lens profile but have a question about the instructions.
Do I use the same size chart for all the focus distance shots?
It is a wide angle lens with quite a close focusing distance.
If I shot with the same chart at 1x, 2x and 5x the minimum focus distance as instructed, then if I pick a chart that works at 1x (i.e. fills 1/2 to a 1/4 the frame), then it is tiny at 5x, and doesn't fill the frame anywhere near the same as at 1x of course.
Am I meant to use a bigger chart? Or start the 1x with a very small one?
Thanks for any help.

Do you know why this lazy fart-ass is back? Because when he posted his homework last week, some sorry-assed idiot went and did it for him.
http://forum.java.sun.com/thread.jspa?threadID=5244564&messageID=10008358#10008358
He didn't even thank the poster.
It's the same problem over and over again. You feed the bears and it only teaches them to come back for handouts.
My polite suggestion to the original poster: please do your own fucking homework.

Anyone able to help with Galaxy S5 WiFi issues?

I have a Samsung Galaxy S5 and ever since I bought it (Purchased on releasing day), the WiFi connection is horrible.
To be more specific, the WiFi works perfectly when using the web browser, however, almost all of my applications that require internet connection such as facebook, youtube, imdb, snapchat, and various email application hardly work at all. I don't know if it's the applications themselves because applications like my mobile banking app, pandora, and my GPS application (Waze) all work just fine with no issues at all.
I googled it and found a few posts with somewhat similar issues which lead me to going into my WiFi settings and changing it from DHCP to static. However, it didn't help. I also went into my router and changed the channel, but it still didn't help.
If you have experience in this area or know of anything I can do to fix it, please feel free to explain.
Thank you

My wife is having the same issue. ive done everything there is to try and fix this issue and was
unsuccessful. She is quite frustrated... after all i did have her leave tmobile to switch to verizon
and now she has had nothing but issues that hse never ever had with tmobile. ive bee with verizon for years.
i just dont get it!
have you got any answers for this issue yet?
thanks

Help with saving images, icc profile?

Hi all, I just read an article http://everydayelementsonline.com/2011/07/web-browsers-and-color-management/ about web browsers and color management. I was going through and looking at how I save my images. In this article it suggests having the ICC profile checked when you save. I noticed when I go in to save from my mac all that pops up for me is "embed color profile: adobe RGB (1998)". I can't figure out why I don't have the ICC option.
I'm brand new to editing images and would appreciate any help I can get. I just want to make sure people are seeing what I think I'm actually editing if they're viewing from the web. I'd appreciate any help or tips, thanks!

Andrea_GB wrote:
… it suggests having the ICC profile checked when you save. I noticed when I go in to save from my mac all that pops up for me is "embed color profile: adobe RGB (1998)". I can't figure out why I don't have the ICC option
LOL !
That is the "ICC option". Adobe RGB is one of many ICC color space profiles.
However, for the web, you should really go to the EDIT menu and CONVERT to sRGB. (Do not use "Assign Profile". Use CONVERT.)
Then when you go to Save, you'll have the option to "embed color profile: sRGB…" (any such variant thereof)., which is another ICC profile and what all non-color managed expect to find on the web.
Wo Tai Lao Le
我太老了

Help with IPad2 and WIFI from US on business in UK

I have free WIFI at my hotel that works great with my laptop. IPad2 (w/3G, but no International plan) recognizes free hotel unsecured network, but will not connect stating "no service." Again - no problems with my laptop - obviously.
Any sugggestions? Thanks in advance.

Some hotels and other places require you to agree to a "Terms of Service" first -- usually just a checkbox or an "OK" button. With my iPad, that often shows up in an internet browser window first, before I can log on to the wifi.
Try opening a Safari page while you are trying to log onto the wifi and see if something like that is there.

Need help with OSx server and profile manager

I messed up my OS X server and seems like it has stopped working.
I cannot access my server remotely or locally and it shows Safari cannot connect to server.
I made mistake resetting keychain to default and all certificates were missing.I restored system.keychain from time machine but not it won't run.
System log shows
ec 30 18:31:25 mdmserver.medicalpharmacies.com certadmin[14697]: BundleManager(non-plugin calling servermgr_certs): doCommand finished reply = {
     error = <62706c69 73743030 d4010203 04050625 26582476 65727369 6f6e5824 6f626a65 63747359 24617263 68697665 72542474 6f701200 0186a0a8 07081112 1a1b1c22 55246e75 6c6cd409 0a0b0c0d 0e0f1056 4e53436f 64655a4e 53557365 72496e66 6f584e53 446f6d61 696e5624 636c6173 7311138a 80038002 80075f10 19636f6d 2e617070 6c652e73 65727665 726d6772 5f636572 7473d313 140c1517 19574e53 2e6b6579 735a4e53 2e6f626a 65637473 a1168004 a1188005 80065f10 164e534c 6f63616c 697a6564 44657363 72697074 696f6e5f 1032556e 61626c65 20746f20 66696e64 20706173 73706872 61736520 666f7220 6578706f 72746564 20707269 76617465 206b6579 d21d1e1f 205a2463 6c617373 6e616d65 5824636c 61737365 735c4e53 44696374 696f6e61 7279a21f 21584e53 4f626a65 6374d21d 1e232457 4e534572 726f72a2 23215f10 0f4e534b 65796564 41726368 69766572 d1272854 726f6f74 80010008 0011001a 0023002d 00320037 00400046 004f0056 0061006a 00710074 00760078 007a0096 009d00a5 00b000b2 00b400b6 00b800ba 00d30108 010d0118 0121012e 0131013a 013f0147 014a015c 015f0164 00000000 00000201 00000000 00000029 00000000 00000000 00000000 00000166>;
     errorCode = 5002;
     errorDescription = "Unable to find passphrase for exported private key";
Dec 30 18:31:25 mdmserver com.apple.xpc.launchd[1] (org.apache.httpd[14695]): Service exited with abnormal code: 1
Dec 30 18:31:25 mdmserver com.apple.xpc.launchd[1] (org.apache.httpd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Hi!
Do you have a time machine backup? What you can try to do is a full restore on a testmachine or a VM and export the old keychain and import it into your broken server:
Passwords:
http://www.icreatemagazine.com/tips/os-x-tutorial-how-to-transfer-keychain-data- between-macs/
Certs:
https://www.racf.bnl.gov/docs/howto/grid/osxcertmgmt
Good luck!

Will airport express help with a weak wifi signal?

I have a new Mac Pro 12 Core and it's the farthest away from the router and is much slower to respond than the Sony Laptop it is replacing. Will an Airport Express give the Mac Pro an edge to help it get a stronger signal?

Hello:
There is probably no way to answer that - it depends on what sort of capability your existing router possesses.
I would probably try an AE, but I do not spend other people's money.
Barry

Help with security on wifi

I accidentally linked onto to someone's wifi for around 20 seconds to look at google maps is there any chance that person could have seen or accessed the photos on my phone? Or am I just over reacting? Need to ask ad apple didn't give me any info on it, quite worried very private phone and info.

I didn't send anything over Internet or through wifi the only thing I went onto was google maps, no encryption or protection used, not worried about google maps just didn't know whether they could access photos stored on phone that weren't sent over the wifi, as u can seeI'mm not at all computer/security literate. Very private person and very private photos and info stored on it(which have since been transferred to another device)

Ipod touch 802.1x wifi

How do you configure the ipod to work with 802.1x wifi. It is suppose to work after the new update but doesn't seem to work.

802.1x is an enterprise-class service, so a desktop app was created so admins can generate and distribute profiles to their users. So, depending on which type of 802.1x auth you want to use, you'll need to use the iPhone Configuration Utility ( http://www.apple.com/support/iphone/enterprise/ ).
See the iPhone and iPod Touch Enterprise Deployment Guide for more information.
Got it working on my iPod Touch with 802.1x PEAP auth on our Cisco wireless network in the office.

802.1x System Profile HELP, Please!!!

Server : Xserve, 10.8.5
Clients : Mix, 10.6.8, 10.8.5
To who ever may be able to help me,
I am the tech director for a school district and manage about 800 Apple laptops ranging from old MacBooks to the latest MacBook Pro. We utilize the LDAP service on our Apple server for authentication via 802.1x. Our entire district uses Aruba Network controllers and access points to privde wireless to our clients. For termination we use PEAP and EAP-GTC. Please don't ask me why we are using those methods, it was set up like that before I started and I am not very familiar with all these protocols and authentication methods. All of our students have network only accounts, nothing is ever saved to the client devices, so they require the system profile to be configured in order for the wireless to be active at the log-in window. I have preconfigured each of our 10.6 clients to authenticate this way with a preconfigured user name and password stored in a profile that I exported from the network preferences, because you used to be able to do that.
Now I am sitting on a pile of newly shipped MacBookPros that, guess what, have 10.8 on them and I am dealing with profiles made by profile manager. Obviously I am here because this is not going well.
I have created a profile in Profile Manager that has all the information I can provide.
Interface is set to WiFi
SSID is set properly
It is a hidden network, so that box is checked
Auto Join is checked
I have no Proxy
Security type is WPA2
I have checked, to Use as a log in window configuration
PEAP is checked
Password is entered
I have also added the certificate that the wireless network asks for when manually connecting
Additionally, I have looked at the profile in Text Edit and confirmed all of the key values are correct.
The profile will successfully install but it will never connect to the network, it will just sit there authenticating. I can manually connect just fine using the same user name and password I used in the profile. I am stuck. If anyone has any tips for me, I would greatly appreciate it.

I am experiencing exactly the same issue in my environment. Same setup: System-level profile configured via Casper, with 802.1x authentication at the loginwindow enabled. Users are able to log in using directory based accounts, but the connection then drops and the profile seems to disappear completely! It is no longer visible in the profiles preference pane, and the network will not function again until the user selects the SSID manually and reauthenticates.
Did you ever find a resolution for this issue? Please help!
-Andy

HT5437 issues with Apple Configurator 1.3 and provisioning (wifi profiles)

I had a configuration profile which worked well using the previous version of apple configurator. Now with the new version something has changed, so it does not work anymore.
The documentation on how to provisioning a profile to the apple TV is still the same, eventhough the GUI and the procedures have changed in "Apple Configurator". Can you please help me, understanding the changes that have been made to v1.3, in order to properly create and provision the wifi profile to the apple tv, as described here: http://support.apple.com/kb/HT5437
thank you

Have you check the following?
Verify that airplane mode is off by tapping Settings > Airplane Mode.
Reset the network settings by tapping Settings > General > Reset > Reset Network Settings. Note: This will reset all network settings, including Bluetooth pairing records, Wi-Fi passwords, VPN, and APN settings
Ensure that your device is using the latest software.
If your issue is still unresolved, perform a software restore in iTune

Need some help with the colour profile please. Urgent! Thanks

Dear all, I need help with the colour profile of my photoshop CS6.
I've taken a photo with my Canon DSLR. When I opened the raw with ACDSee, the colour looks perfectly ok.
So I go ahead and open in photoshop. I did nothing to the photo. It still looks ok
Then I'm prompt the Embedded Profile Mismatch error. I go ahead and choose Discard the embedded profile option
And the colour started to get messed up.
And the output is a total diasater
Put the above photo side by side with the raw, the red has became crimson!!
So I tried the other option, Use the embedded profile
The whole picture turns yellowish in Photoshop's interface
And the output is just the same as the third option.
Could someone please guide me how to fix this? Thank you.

I'm prompt the Embedded Profile Mismatch error. I go ahead and choose Discard the embedded profile option
always use the embedded profile when opening tagged images in Photoshop - at that point Photoshop will convert the source colors over to your monitor space correctly
if your colors are wrong at that point either your monitor profile is off, or your source colors are not what you think they are - if other apps are displaying correctly you most likely have either a defective monitor profile or source profile issues
windows calibrate link:
http://windows.microsoft.com/en-US/windows7/Calibrate-your-display
for Photoshop to work properly, i recall you want to have "use my settings for this device" checked in Color Management> Device tab
you may want to download the PDI reference image to check your monitor and print workflows
and complete five easy steps to profile enlightenment in Photoshop
with your settings, monitor profile and source profiles sorted out it should be pretty easy to pinpoint the problem...

Help with 802.1x wifi profile

Similar Messages

Maybe you are looking for