topic Re: MSM760 Controller - Active Directory authentication in M and MSM Series

MSM760 Controller - Active Directory authentication

Moop — Thu, 28 Jun 2012 12:13:31 GMT

Hello!

I need help configuring my MSM760 for Active Directory authentication, I've succesfully joined a domain and activated the default Active directory groups on my controller.

I configured the VSC to use 802.1X authentication and checked in the box for Active Directory authentication.

When I try to connect to the network I get the error message "Network authentication failed because of a problem with the user account".

This is my first time working with this type of solution, any kind of tip that would point my in the right direction would be highly appreciated!

Re: MSM760 Controller - Active Directory authentication

ISoliman — Sun, 08 Jul 2012 11:39:51 GMT

Try the below link from HP, has full details about Active Directory configuration, it is an old one but still valid:

http://h20000.www2.hp.com/bizsupport/TechSupport/CoreRedirect.jsp?redirectReason=DocIndexPDF&prodSeriesId=3963981&targetPage=http%3A%2F%2Fbizsupport2.austin.hp.com%2Fbc%2Fdocs%2Fsupport%2FSupportManual%2Fc02634578%2Fc02634578.pdf

Re: MSM760 Controller - Active Directory authentication

Moop — Mon, 09 Jul 2012 13:51:25 GMT

Hi, thanks for the answer!

However I'm still having problems, maybe I should have mentioned in the OP that I'm running against a Samba 4 Domain aswell.

On the supplicant I ran: netsh ras set tracing * enabled. Everything seems to be fine until the end of the log when I recieve the following error:

[13660] 07-09 12:25:38:425: Success received...
[13660] 07-09 12:25:38:426: Done :)
[13660] 07-09 12:25:38:426: GetClientMPPEKeys
[7996] 07-09 12:25:38:506: EapMSChapv2MakeMessage
[7996] 07-09 12:25:38:506: EapMSChapv2CMakeMessage (\administrator)
[7996] 07-09 12:25:38:506: EMV2_CHAPAuthSuccess
[7996] 07-09 12:25:38:506: EapMSChapv2CMakeMessage: rcvd invalid pk, code: 4, expecting 3
[7996] 07-09 12:25:38:542: EapMSChapv2End
[7996] 07-09 12:25:38:542: ChapEnd

I've googled my heart out on this problem but have yet to find anything usefull, maybe Samba is just not supported by the controller?

Thanks again for the help!

Re: MSM760 Controller - Active Directory authentication

Manfri — Tue, 10 Jul 2012 10:32:10 GMT

Samba... it's a good guess.

the controller do ldap query to specific attribute (MsNPAllowDialin) in ad, that i don't think are implemented by samba.

i wolu try to find a you can che have a radius implementation that interface with the samba AD, like IAS do with Microsoft AD.