WAP login / Radius / Windows 7

It was suggested I ask my question in this forum.
We are trying to log into laptops wirelessly. The users can only log into laptops that they have cached credentials on, but we need them to be able to login for the first time while only connected via wireless. Any
suggestions are appreciated.
We are using:
Windows 7
Microsoft Radius Server
Cisco WAPs
WPA2-Ent MS-PEAP
We are pushing out the wireless settings for our WPA-Ent SSID via group policy with the following settings for 802.1x settings:
Cache user information for subsequent connections to this network
Enabled
Computer Authentication
User authentication
Maximum Authentication Failures
3
Maximum EAPOL-Start Messages Sent
Held Period (seconds)
Start Period (seconds)
Authentication Period (seconds)
Single Sign On type
preLogon
Maximum acceptable delay for network connectivity
30
This network uses different VLAN for authentication with machine and user credentials
Disabled
Allow additional dialogs during single sign on
Enabled

It was suggested I cross-post my question here (it is also is in the Directory Services and Network forums).
We are trying to log into laptops wirelessly. The users can only log into laptops that they have cached credentials on, but we need them to be able to login for the first time while only connected via wireless. Any
suggestions are appreciated.
We are using:
Windows 7
Microsoft Radius Server
Cisco WAPs
WPA2-Ent MS-PEAP
We are pushing out the wireless settings for our WPA-Ent SSID via group policy with the following settings for 802.1x settings:
Cache user information for subsequent connections to this network
Enabled
Computer Authentication
User authentication
Maximum Authentication Failures
3
Maximum EAPOL-Start Messages Sent
Held Period (seconds)
Start Period (seconds)
Authentication Period (seconds)
Single Sign On type
preLogon
Maximum acceptable delay for network connectivity
30
This network uses different VLAN for authentication with machine and user credentials
Disabled
Allow additional dialogs during single sign on
Enabled

Similar Messages

Aironet 2702i Autonomous - Web-Authentication with Radius Window 2008

Hi Guys,
I have a problems with case, i have diagrams sample like then : AD(Win2008) - Radius(Win2008) - Aironet 2702i => Use methods Web-Auth for EndUser
This is my Configure file on Aironet 2702i
Aironet2702i#show run
Building configuration...
Current configuration : 8547 bytes
! Last configuration change at 05:08:25 +0700 Fri Oct 31 2014 by admin
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname Aironet2702i
logging rate-limit console 9
aaa new-model
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local
aaa authentication login DTSGROUP group radius
aaa authentication login webauth group radius
aaa authentication login weblist group radius
aaa authentication dot1x default group radius
aaa authorization exec default local
aaa session-id common
clock timezone +0700 7 0
no ip source-route
no ip cef
ip admission name webauth proxy http
ip admission name webauth method-list authentication weblist
no ip domain lookup
ip domain name dts.com.vn
dot11 syslog
dot11 activity-timeout unknown default 1000
dot11 activity-timeout client default 1000
dot11 activity-timeout repeater default 1000
dot11 activity-timeout workgroup-bridge default 1000
dot11 activity-timeout bridge default 1000
dot11 vlan-name DTSGroup vlan 46
dot11 vlan-name L6-Webauthen-test vlan 45
dot11 vlan-name NetworkL7 vlan 43
dot11 vlan-name SGCTT vlan 44
dot11 ssid DTS-Group
vlan 46
authentication open eap DTSGROUP
authentication key-management wpa version 2
mbssid guest-mode
dot11 ssid DTS-Group-Floor7
vlan 43
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 013D03104C0414040D4D5B5E392559
dot11 ssid L6-Webauthen-test
vlan 45
web-auth
authentication open
dot1x eap profile DTSGROUP
mbssid guest-mode
dot11 ssid SaigonCTT-Public
vlan 44
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 04480A0F082E424D1D0D4B141D06421224
dot11 arp-cache optional
dot11 adjacent-ap age-timeout 3
eap profile DTSGROUP
description testwebauth-radius
method peap
method mschapv2
method leap
username TRIHM privilege 15 secret 5 $1$y1J9$3CeHRHUzbO.b6EPBmNlFZ/
username ADMIN privilege 15 secret 5 $1$IvtF$EP6/9zsYgqthWqTyr.1FB0
ip ssh version 2
bridge irb
interface Dot11Radio0
no ip address
encryption vlan 44 mode ciphers aes-ccm
encryption vlan 46 mode ciphers aes-ccm
encryption mode ciphers aes-ccm
encryption vlan 43 mode ciphers aes-ccm
encryption vlan 1 mode ciphers aes-ccm
ssid DTS-Group
ssid DTS-Group-Floor7
ssid L6-Webauthen-test
ssid SaigonCTT-Public
countermeasure tkip hold-time 0
antenna gain 0
stbc
mbssid
packet retries 128 drop-packet
channel 2412
station-role root
rts threshold 2340
rts retries 128
ip admission webauth
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio0.43
encapsulation dot1Q 43
bridge-group 43
bridge-group 43 subscriber-loop-control
bridge-group 43 spanning-disabled
bridge-group 43 block-unknown-source
no bridge-group 43 source-learning
no bridge-group 43 unicast-flooding
interface Dot11Radio0.44
encapsulation dot1Q 44
bridge-group 44
bridge-group 44 subscriber-loop-control
bridge-group 44 spanning-disabled
bridge-group 44 block-unknown-source
no bridge-group 44 source-learning
no bridge-group 44 unicast-flooding
ip admission webauth
interface Dot11Radio0.45
encapsulation dot1Q 45
bridge-group 45
bridge-group 45 subscriber-loop-control
bridge-group 45 spanning-disabled
bridge-group 45 block-unknown-source
no bridge-group 45 source-learning
no bridge-group 45 unicast-flooding
ip admission webauth
interface Dot11Radio0.46
encapsulation dot1Q 46
bridge-group 46
bridge-group 46 subscriber-loop-control
bridge-group 46 spanning-disabled
bridge-group 46 block-unknown-source
no bridge-group 46 source-learning
no bridge-group 46 unicast-flooding
interface Dot11Radio1
no ip address
shutdown
encryption vlan 46 mode ciphers aes-ccm
encryption vlan 44 mode ciphers aes-ccm
encryption vlan 1 mode ciphers aes-ccm
encryption vlan 43 mode ciphers aes-ccm
encryption vlan 45 mode ciphers ckip-cmic
ssid DTS-Group
ssid DTS-Group-Floor7
ssid SaigonCTT-Public
countermeasure tkip hold-time 0
antenna gain 0
peakdetect
dfs band 3 block
stbc
mbssid
packet retries 128 drop-packet
channel 5745
station-role root
rts threshold 2340
rts retries 128
interface Dot11Radio1.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio1.43
encapsulation dot1Q 43
bridge-group 43
bridge-group 43 subscriber-loop-control
bridge-group 43 spanning-disabled
bridge-group 43 block-unknown-source
no bridge-group 43 source-learning
no bridge-group 43 unicast-flooding
interface Dot11Radio1.44
encapsulation dot1Q 44
bridge-group 44
bridge-group 44 subscriber-loop-control
bridge-group 44 spanning-disabled
bridge-group 44 block-unknown-source
no bridge-group 44 source-learning
no bridge-group 44 unicast-flooding
ip admission webauth
interface Dot11Radio1.45
encapsulation dot1Q 45
bridge-group 45
bridge-group 45 subscriber-loop-control
bridge-group 45 spanning-disabled
bridge-group 45 block-unknown-source
no bridge-group 45 source-learning
no bridge-group 45 unicast-flooding
ip admission webauth
interface Dot11Radio1.46
encapsulation dot1Q 46
bridge-group 46
bridge-group 46 subscriber-loop-control
bridge-group 46 spanning-disabled
bridge-group 46 block-unknown-source
no bridge-group 46 source-learning
no bridge-group 46 unicast-flooding
interface GigabitEthernet0
no ip address
duplex auto
speed auto
dot1x pae authenticator
dot1x authenticator eap profile DTSGROUP
dot1x supplicant eap profile DTSGROUP
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
interface GigabitEthernet0.43
encapsulation dot1Q 43
bridge-group 43
bridge-group 43 spanning-disabled
no bridge-group 43 source-learning
interface GigabitEthernet0.44
encapsulation dot1Q 44
bridge-group 44
bridge-group 44 spanning-disabled
no bridge-group 44 source-learning
interface GigabitEthernet0.45
encapsulation dot1Q 45
bridge-group 45
bridge-group 45 spanning-disabled
no bridge-group 45 source-learning
interface GigabitEthernet0.46
encapsulation dot1Q 46
bridge-group 46
bridge-group 46 spanning-disabled
no bridge-group 46 source-learning
interface GigabitEthernet1
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet1.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
interface GigabitEthernet1.43
encapsulation dot1Q 43
bridge-group 43
bridge-group 43 spanning-disabled
no bridge-group 43 source-learning
interface GigabitEthernet1.44
encapsulation dot1Q 44
bridge-group 44
bridge-group 44 spanning-disabled
no bridge-group 44 source-learning
interface GigabitEthernet1.45
encapsulation dot1Q 45
bridge-group 45
bridge-group 45 spanning-disabled
no bridge-group 45 source-learning
interface GigabitEthernet1.46
encapsulation dot1Q 46
bridge-group 46
bridge-group 46 spanning-disabled
no bridge-group 46 source-learning
interface BVI1
mac-address 58f3.9ce0.8038
ip address 172.16.1.62 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
ip forward-protocol nd
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius server 172.16.50.99
address ipv4 172.16.50.99 auth-port 1645 acct-port 1646
key 7 104A1D0A4B141D06421224
bridge 1 route ip
line con 0
logging synchronous
line vty 0 4
exec-timeout 0 0
privilege level 15
logging synchronous
transport input ssh
line vty 5 15
exec-timeout 0 0
privilege level 15
logging synchronous
transport input ssh
end
This is My Logfile on Radius Win 2008 :
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: S-1-5-21-858235673-3059293199-2272579369-1162
Account Name: xxxxxxxxxxxxxxxx
Account Domain: xxxxxxxxxxx
Fully Qualified Account Name: xxxxxxxxxxxxxxxxxxx
Client Machine:
Security ID: S-1-0-0
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: -
Calling Station Identifier: -
NAS:
NAS IPv4 Address: 172.16.1.62
NAS IPv6 Address: -
NAS Identifier: Aironet2702i
NAS Port-Type: Async
NAS Port: -
RADIUS Client:
Client Friendly Name: Aironet2702i
Client IP Address: 172.16.1.62
Authentication Details:
Connection Request Policy Name: Use Windows authentication for all users
Network Policy Name: DTSWIRELESS
Authentication Provider: Windows
Authentication Server: xxxxxxxxxxxxxx
Authentication Type: PAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 66
Reason: The user attempted to use an authentication method that is not enabled on the matching network policy.
So i will explain problems what i have seen:
SSID: DTS-Group using authentication EAP with RADIUS and it working great (Authentication Type from Aironet to RADIUS is PEAP)
SSID:L6-Webauthen-test using web-auth and i had try to compare with RADIUS but ROOT CAUSE is AUTHENTICATION TYPE from Aironet to RADIUS default is PAP. (Reason Code : 66)
=> I had trying to find how to change Authentication Type of Web-Auth on Cisco Aironet from PAP to PEAP or sometime like that for combine with RADIUS.
Any idea or recommend for me ?
Thanks for see my case

Hi Dhiresh Yadav,
Many thanks for your reply me,
I will explain again for clear my problems.
At this case, i had setup complete SSID DTS-Group use authentication with security as PEAP combine Radius Server running on Window 2008.
I had login SSID by Account create in AD =>  It's work okay with me. Done
Problems occurs when i try to use Web-authentication on Vlan45 With SSID :
dot11 ssid L6-Webauthen-test
vlan 45
web-auth
authentication open
dot1x eap profile DTSGROUP
mbssid guest-mode
After configured on Aironet and Window Radius , i had try to login with Account create in AD by WebBrowser but it Fail ( i have see mini popup said: Authentication Fail" . So i go to Radius Server and search log on EventViewer.
This is My Logfile on Radius Win 2008 :
Network Policy Server denied access to a user.
NAS:
NAS IPv4 Address: 172.16.1.62
NAS IPv6 Address: -
NAS Identifier: Aironet2702i
NAS Port-Type: Async
NAS Port: -
RADIUS Client:
Client Friendly Name: Aironet2702i
Client IP Address: 172.16.1.62
Authentication Details:
Connection Request Policy Name: Use Windows authentication for all users
Network Policy Name: DTSWIRELESS
Authentication Provider: Windows
Authentication Server: xxxxxxxxxxxxxx
Authentication Type: PAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 66
Reason: The user attempted to use an authentication method that is not enabled on the matching network policy.
Im think ROOT CAUSE is :
PAP is the default authentication type for web-auth users on Aironet 2702i, so it can't combine with Radius Window 2008 because they just support PEAP (CHAPv1,CHAPv2....) => Please give me a tip how to change Authentication Type from PAP to PEAP for Web Authentication on Aironet

Cannot login my Windows 8.1 Pro with my live ID, don't have the Microsoft Logon Option

My laptop was installed with a Windows 8.1 Pro, and it worked very well before, i can login with my domain account and Windows Live ID, but today when i startup my laptop and i cannot find the option "Login with Microsoft/Live ID", i only can login
with "Domain account/Local Account/SmartCard".
Microsoft Account/Live ID is a local administrator but my domain account seems is not a local administrator.
Now even i can login with my domain account, but i cannot change anything, because i'm not a administator, so how to make the "Microsoft Account" login available when i login the windows? (by the way, i cannot add a new login in the "Change
PC Settings->Accounts", because my domain account is not a local administrator)
thanks.
William
William

Hi William,
According to your description,I would like to know if you can see "Other User" option on the login screen.
If you can see it,please click it and type your microsoft account.
If you cannot see this option,please click Switch user to check the result.
If the issue still persists, please upload the screenshot.
Regards,
Regards,
Kelvin hsu
TechNet Community Support

Login Error Window pops up while starting a JAVA Webstart Application

Hello members,
I am getting this Login Error window whenever I try to run a downloaded application of Java Web Start. Please help me regarding this.
Since, I am not able to upload the picture here directly, I cant really show you the image of the error message.
Please let me know, if you need further details regarding this error message. Kindly get back with a solution as this is critical for my project.

Could you at least post textual parts of the window? By the way, you can upload the image everywhere in the net and link the url here in the forum.

Automate BT FON login on Windows 7

Hi,
As per the title, is there a way to automate the BT FON login on Windows 7 (i.e the equivalent of the BT FON app on Android or iPhones etc)..?
Cheers
Simon

couplands wrote:
Thanks, I can get connected to BT FON hotspots just fine, but then I need to enter my username/password to connect to the Internet. It's that part I'd like to automate.
Sorry I didn't get that point, and to be honest would have guessed that it couldn't be done. I tried it myself though, and was surprised that my log-in information was retained; even after rebooting, the computer would connect automatically to my own hotspot. However, there is another BT WiFi hotspot in range of my hub and connecting to that brought up the landing page; but if I then choose the other one as default it will also subsequently connect automatically.
If that experiment is representative, the answer seems to be that you can log in automatically but can't port the details to another hotspot.
(By the way I've amended my previous post to clarify that you need to check "Connect automatically" before "Connect" to get the hotspot into your Windows list of connections, though I assume you would have done that.)
You can click the white star next to this message if you think it was helpful.

Error login through windows AD

when login thorgh enterprise in infoview it works fine but when i login through windows AD it gives the following error
An error has occurred: org.apache.jasper.JasperException
Any suggestion..what mistake i am doing.

Hello Amita,
Your description is a bit too generic.
Try to see first if you are able to connect with AD on client tools like Deski or Designer
Test the kinit command if it works with the clients tools.
Have a look at the note 1476374 which provides a very good troubleshooting method
https://bosap-support.wdf.sap.corp/sap/support/notes/1476374
Regards,
Philippe

Why my desktop adobe creative cloud cannot login but window adobe creative cloud can login :(

why my desktop adobe creative cloud cannot login but window adobe creative cloud can login anyone can help me ?

Please read, and reply back here with information https://forums.adobe.com/thread/1499014
-and try some steps such as changing browsers and turning off your firewall for downloads
or
A chat session where an agent may remotely look inside your computer may help
Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

Can't login to Windows Azure account 'We are having trouble logging you into the portal'

Hi,
I have been unable to login to Windows Azure account or Azure support sites for about a month now. I activated my account using company MSDN subscription.
I get the same error message in both cases:
We are having trouble logging you into the portal.
See screenshots bellow:

Hi Mark,
May I know whether you have followed below steps to contact with Azure customer support?
Get the support channel at:
http://www.windowsazure.com/en-us/support/options/
Select a support topic ==>>I cann't sign in to Microsoft Azure
Log the information as required and submit the ticket.
A Microsoft support professional will contact with you as soon as we can
Sincerely apologize for this inconvenience and we appreciate your patience.
Should you have any other concern, please feel free to let me know.
Thanks.
Best Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Unable TO Login for Window Messenger

I have BB curve 8530, I m unable to login into Window messenger, it say invalid email or password, whereas I m able to login on my laptop using the same details. I tried to Login with a new hotmail account, creating a new account , I changed my password, I deleted the app and re-installed. Unable to figure out the solution. I was able to login yesterday but since today morning i m facing this problem. Need help.
Thanks In advance
Adscurve.

Hello Adscurve,
Try reinstalling the application once again by going to www.blackberry.com/livemessenger on your device browser and test logging in once again. Let me know if you receive any error messages.
Thanks.
-FB
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click "Accept as a Solution" for posts that have solved your issue(s)!

SBS 2011 Domain Accounts Can't Login To Windows 8 PC

One of our Windows 8.1 machines is no longer allowing domain accounts (except admin) to login to the PC. This PC was a fresh setup and was joined to the domain in January. When I log into the PC with the network admin and go to logs I get the
following message related to group polocies not being able to be applied (now it won't let me connect at all). I'll upload log files as soon as I can connect again.
We are running an SBS 2011 server that handles all ad, dns, exchange 2010, remote web access, etc.
Any ideas on what may be going wrong or how I should troubleshoot the issue?
Thanks!

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet
Subscriber Support
If you are TechNet
Subscription user and have any feedback on our support quality, please send your feedbackhere.
Andy Qi
TechNet Community Support

Cannot login to Windows 8 Domain PC with AD account

I have a Dell Inspiron 15Z which is joined to the domain. The laptop is running Windows 8. I am unable to login to the computer with any domain account (even accounts that have profiles saved on this device). I can ping the DC and I am able to login to the
DC with one of the accounts via RDP, so I know the account is not locked out. Just to be safe I reset the password for the account and still it gives me the "Incorrect password or username. Try again" error.
A little background:
I recently did a Windows Refresh on the computer due to some software issues. After Windows Refresh was completed I was able to login fine. But after a while it started throwing me the above error. I reset the password and was able to login under both accounts.
Now neither accounts work. My domain has two domain controllers, one is currently offline due to hardware issues.
I have used to lockoutstatus.exe tool to verify that the account is not locked out. I also verified that each unsuccessful attempt to login to the domain PC does not register on the Bad Pwd Count tab. I then entered in a bunch of garble for the domain account
and it did register bad login attempts so I know the domain is functioning correctly. I forced a gpupdate and I also forced a replication on the dc, still nothing.
Any help would be greatly appreciated. I am able to login to the computer using local accounts and Microsoft accounts, but no domain accounts.

Since you did a refresh, then run Windows Update and install all updates. Try disconnect from domain and rejoin and check if problem persist or not.

Can't login IE11 windows 8.1 HP laptop

The BT sport website freezes when I try to login in via IE11 using windows 8.1 on my laptop. There is no error message, and task manager shows no activity, it just sits there. I have to close the browser to exit.
I can login using Chrome on the same laptop but then I can't watch videos as silver light not supported. I can login on my iPad but that's not the point!
I can't login to the main BT site either . I tried turning off mcAfee in case that was a problem...
I've worked round it by downloading Firefox but how can I fix this?

Hi Brixtongardener,
Thanks for posting back!
Send us over your details and we'll look into this. You'll see the link to send us your details in my profile under the "about me" section. You'll find it by clicking on my username >>> RobbieMac
Cheers,
Robbie
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry that we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Black screen after login. Windows 8 is not opening

After login, I only have a black screen with a cursor.
Windows 8 does not open. Cannot get to "System Restore" or Control Panel.
HP hardware self- diagnostic tests were negative & didn't help.
Please offer possible solutions for recovery.

Then that does not pertain to your problem.
On Kaspersky Rescue Disk on another computer download and burn to USB stick or DVD to run a full scan on your computer.
http://support.kaspersky.com/4162
Are you able to boot into Safe Mode to perform a System Restore?
Please mark my post as SOLVED if it has resolved your problem. It helps others with similar situations.

Adobe content viewer grey screen after login on windows 8.1

we're on Windows 8.1, content viewer is not running, after login it shows a grey screen with just "Adobe content Viewer" on the upper left, but nothing working....

I'm sorry Neil, I'm working on a folio on Indesign, if I share the folio from Folio Builder (Indesign) to my account, and then I open adobe content viewer on my iPad, I can see the cover of the folio shared and I can download it.
Instead, with the same account on adobe content viewer (windows 8.1), I see nothing and I can not do any action.

Active Directory logins from Windows to Final Cut Server

While I did manage to solve my main problem with Integrating AD with Final Cut Server at this one site.... It turns out that there a typo in the kerberos config file. Ooops. Now logins in from Mac OS using AD credentials works well. Unfortunately, I am still seeing some minor issues, like certain groups in AD not being able to login, and for some reason the Windows users can't login (only the Macs using AD credentials). Any seeing anything like this? Of course I enabled certain groups in Final Cut Server pref pane to match certain AD groups, but in the end only the BuiltIn groups worked, not the Domain Users, Domain Admin groups. Strange. And not sure why Windows users can't login. Same domain. Fun times.

It seems like I read the inital Kb article wrong. The Windows clients get the krb5.ini file, not the Domain Controller. LOL. Thanks to drew for pointing that out to me.
http://support.apple.com/kb/HT3688
In order for Active Directory bound Windows Final Cut Server client systems to successfully authenticate to Final Cut Server, you must create a custom Kerberos configuration file on the Windows client system.

WAP login / Radius / Windows 7

Similar Messages

Maybe you are looking for