WDS and authentication

We have 1200 APs configured with mobility networks (mGRE tunnels terminated on a WLSM). The APs are pointed at the WLSM WDS and pass their authentication requests to the WLSM acting as the WDS using WLCCP. However, these APs also provide wireless access to the local wired networks. This can be configured, but it appears that all authentication requests go via the WDS (i.e. all locally configured RADIUS servers for local network authentication are ignored).
The WLSM Deployment Guide suggests that it is possible to have "WDS" and "non-WDS" SSIDs coexist. The consequence is that the availability of the WDS (on the WLSM) becomes critical, even for APs which could authenticate local wireless users through RADIUS servers configured directly on the AP.

WDS checks its local list for authentication . If the Mac address is not present it uses configured Radius server for authentication. Make sure Mac address is either in the Local list or Radius server. If you are using Radius server make sure Mac address is configured as user

Similar Messages

WDS and IAS Authentication

Hello !
I'm trying to configure 15 Access Points AP1231 as follow :
SSID1 mapped to VLAN 1 (also management VLAN) for Laptops. Encryption is WEP128 and Mac-authentication with Microsoft IAS server.
SSID2 mapped to VLAN 10 (phone VLAN)for phones 7921. Encryption is WEP128 and there is no authentication fo the phones.
I configure 1 AP as a WDS Master (priority 254). WDS registration works fine for all the 15 APs.
My problem :
it seems that when i activate WDS, MAC-authentication for ESSID1 doesn't work anymore (authentication failed for all the laptops).
Can you help me ?

WDS checks its local list for authentication . If the Mac address is not present it uses configured Radius server for authentication. Make sure Mac address is either in the Local list or Radius server. If you are using Radius server make sure Mac address is configured as user

WDS not authenticated with WLSE / Freeradius

I create a AP WDS (12.2(15))with Freeradius working well -> AP Information : authenticated
I give the Wireless Network Manager Ip Adresse on my WDS and my WDS Status is allways NOT AUTH. I never a request of my WLSE on my Radius. How can I configure my WLSE / WDS or Radius to have authenticated status ?

I configure SNMP on both with the same public and private community but how can I be sure that my WLSE is able to manage the WDS AP ?
I have entered in DEVICES->DISCOVER->WLCPP Credentials a USER/PASSWD I olso have entered this USER/PASSWD on my radius and in the Admin Access of my WDS AP is it good ? (I don't understand when you say "you have entered the LEAP credental on the WLSE")

WDS AND WLSE

Hi all , one we have set up the wds, what would happen if my wlse device broke? would this take down my wds service ?

Sorry I forgot to answer this.
As I mentioned, WLSE is just monitoring.
Only If WLSE is being used as Radius server, then the NEW authentications might fail.
"Might", because remember that WDS will try to cache the credentials, for example, for roaming.
But sometimes it cache it for a long time. And additionally the current authenticated users will still be associated and authenticated. So only if a new user trys to associate and authenticate, you will notice that the authentication is not working.
Now, the other possibility is that you are using a backup WDS and or backup radius server. So everything will keep working as expected.

How do I bind to directory server with SSL and authentication?

I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
Here are the problems:
1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
2) I was never prompted to authenticate for the directory binding.
So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
Thank you.

You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
Cheers,
Vikas

AP 1200 and authentication

I have an AP configured with WDS and authenticate via a radius server. I notice that when i enable a user they are asked for a login but if they drop the connection or even shut the machine and go to log back in, they are NOT prompted for their login again. Is the AP caching that login and is there a timeout that can be set?

The Cisco Secure Server version I am using is 3.2(3).
Thanks

Re : Remove System and Authentication from QaaWS login dialog

Hello there,
Hope all is well. I am trying to get rid of OR pre-populate with default values for System ( CMS) and Authentication boxes from QaaWS login dialog. I know you can do it in Desktoplauch and Adminlaunch ( Yes I am using BOXI R2 SP5) ...by modifying/editing web.xml deployment descriptor ....where would you do this for QaaWS login boxes ....DSWS application ?
BTW, my .SWF O/P doesn't reside in Infoview ans is out of BO environment. Also, I want users to login with there AD login....hence didn't want to embed credetials in XC.
Thanks in advance,
Sam
Edited by: samshaw on Jul 28, 2010 4:10 AM

Hi David,
Sorry I appreciate this is an old post, but I seem to be going around in circles.
I understand how to generate and pass the sessionID into a SWF, and I can see the QaaWSHeader.sessionID element in the QaaWS WISDL, but do you or anyone else know how to pass the session ID back using this element?
There are no obvious options when in Dashboard Design (Xcelsius) - I tried appending QaaWSHeader.sessionID to the URL call also with no succes (just seems to ignore it).
Does anyone know how this can be achieved.
My ultimate objective is a SWF hosted outside of Infoview that can consume and share the one session for multiple QaawS and OpenDoc calls.
Thanks in advance
Wilf

WDS, DHCP and WSUS on same server, Virtuals find WDS and start up process, Physicals get PXE-X55 error.

I have a Windows 2012 R2 server that has the WSUS, WDS and DHCP roles installed. I also have a SCVMM (Win2012R2) server on different machine and it has been connected to the WDS server
Followed many different guides on the internet to configure the WDS server but if I have option 60 configured the virtual machines will find and do a PXE boot successfully, but the physical systems will fail with a E55 error.
I take out option 60 and both fail.
Did I miss a niggly bit some where?

Have you tried this (from article):
Custom-made Option 60 – String – PXEClient
Predefined Option 66 – IP or Hostname of the WDS Server (in our case 10.150.150.1)
Predefined Option 67 – boot\x86\wdsnbp.com
and this in WDS properties:
and
Many people remark this as solution:
WDSUTIL /Delete-AutoAddDevices /DeviceType:ApprovedDevices

When trying to print I get error code 30892 and authentication required how do I fix this?

I am new to my Mac and am having trouble printing. I keep getting error code -30892 and authentication required and it can't print. I have sharing features open on both my PC and my Mac. Any suggestions?

Doesn't sound like any error number I'm familiar with. What's your set-up? Are you using a print server?

[HELP] connection and authentication drivers

Hello,i'am an italian student
i'd want to use an authentication driver to force the user to authenticate (insert Username and password) for Olap access and BIcatalog access when launching my java client.At the moment the authentication is done through the configuration.xml and DAD files,but i'd want that is the user that specify his credentials.
I studied the guide "managing security" but i did not understand how to register and use this driver.
I tried to add the line
<PluggableDriver DriverType="a" InvocationLevel="session" Required="true"
DriverClass="oracle.dss.appmodule.server.DSSApplicationModuleAuthenticationDriver"/>
in the configuration.xml file,but it does not work.
Someone knows how to use the connection and authentication drivers?
Thanks very mutch for help

Is there really no one who can help me with this?

WDS and MDT

I setup my WDS and MDT Deployment and the image booms out at TFTP and never gets to the menu screen.

Hi dektame,
Some required information are needed for us to help you. A screen shoot would be appreciated.
By the way, if you mean you stuck in TFTP step, you need check if imported right boot image to WDS.
Regards
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Separate LDAPs for Users information and Authentication

Does anyone know how to point the Directory Provider and Authentication provider to different LDAPs? This is very easy to do with Policy Server by configuring the login-config.xml file to use the com.adobe.edc.server.provider.authentication.login.LDAPLoginModule class and specifying the LDAP connection properties. However, I have yet to find a way to do it with Workflow. I tried doing it exactly the same way as policy server, but that does not work.
Has anyone done this before, or know how to do it without writing code? I don't want to have to write my own LDAP authentication provider if one already exists (which it does for Policy Server).

Hello Linda,
This is possible. You can have project online and Project Pro for office 365 on two different tenant. Once you install Project Professional, you need to configure the account in project professional to connect to your project online tenant. Below article
contains the steps connect to project server from Project Professional. In step 4 user have to enter the URL of Project online tenant and when they try to connect they need enter their Project Online credentials. Everything should work as expected.
http://office.microsoft.com/en-in/project-help/connect-log-on-to-project-server-HA010373238.aspx
In fact once you install the Project professional for office 365, you can connect to any PWA instance to which you have access to (on-premise and online).
Hope this helps!
Kiran K.

OAM (authorization and authentication)

Does OAM offer any cape Web Services for the authorization and authentication?
Thanks in Advance, Awaiting sooner response.
Edited by: Odemail on 05-abr-2012 8:31

For this you can check with Oracle Support
Thanks
kumar

WDS and Roaming with 1130AG APs

Hi there,
I was wondering if someone could provide me with some insight into a configuration scenario i'm facing:
Our office is situated in an old building and as such , wireless range is an issue as the walls are very thick and we have a mixture of clients from Laptops to android devices to iPhones that require access.
we have 2 goals (first 2 are more important)
1. to be able to roam anywhere in the building and pickup the wireless (fast roaming isn't really that necessary as voice isn't utilised)
2. to have only 1 SSID for corporate access - Corp VLAN
3. to have an SSID for guests to access - Guest VLAN
The VLANs aren't an issue, i have an 1130AG setup which already has 2 SSIDs which does what i need.
My main concern is around roaming, and i've read a lot about WDS, but this needs an external radius server, i've seen the articles that describe how to set up an AP as WDS and then add Infrastructure APs
I've also seen that you can simply configure each AP exactly the same, but with different channells.
I have 4 1130AGs at my disposal.
What would you guys suggest is my best solution?
Any help would be gratefully received.

To get the best roaming, you need to make sure you have enough coverage. That usually means a good site survey was performed to specify how many access points and the locations of the access point. Without this piece, there is no guarantee of roaming.
As far as WDS, you can setup an autonomous ap as a WDS server that is either dedicated as a WDS or is a WDS server and also serves clients.
Sent from Cisco Technical Support iPhone App

WDS and Unattended queries/clarification (Server 2012)

Hi Folks
I am studying for my 70-411 exam and have a few points that I would like clarification on relating to unattended installations and WDS:
1: When you create an unattend.xml for the 'Windows Deployment Services client’, in SIM which image do you need to base this on?
Do you just use the install.wim from the server iso?
2: Are both a WDSClientUnattend and a ClientUnattend mandatory for unattended to work?
For example if you only want to automate the image settings but not the settings pre-image selection (such as usename/password to connect to WDS) can you specify only a ClientUnattend?
3: Can disk partitions be set in the ClientUnattend or do these have to be in the WDSClientUnattend file?
Thanks in advance.

1. The WDS Client itself is based on "boot.wim" from a preferably new OS. For instance if you plan to deploy Windows Server 2012R2 or Windows 8.1, you need to have a 6.3 version of the boot.wim, either from the 2012R2 server iso, or Windows 8.1
iso (it doesn't actually matter). You can deploy e.g. windows 7 from the 6.3 boot.wim aswell, but not the other way around.
2. The WDSClientUnattend is for the "WDS Client" part, that means you should specify settings here on "how you want to perform the installation", e.g. which edition of Windows to install (Server standard, or Server Enterprise...), to
which DISK (and how to partition it), credentials to connect to WDS share (remoteinstall$ on WDS), and also what language and keyboard settings to use during setup. If you don't specify this, you can still specify an unattend.xml file for an install Image,
that is settings relevant to a specific image only. So you can decide to do either of them, or both.
3. This needs to be done in WDSClientUnattend, that is "1 - WinPE-phase". You can see this phase as the first phase Before first reboot, that is lang settings, partition settings, image selection, and then copying of files. Upon next reboot, and
not Before is when you reach the next Phase, that is "4 - Specialize"

WDS and authentication

Similar Messages

Maybe you are looking for