[brlug-general] Wireless security (Not specifically Linux-related)

[Fernando Vilas]

El Tuesday 03 April 2007 14:49:21 -ray escribió:
> On Tue, 3 Apr 2007, Joe Fruchey wrote:
> > My other RADIUS question: We can have one server to authenticate
> > everybody, right? Even though they're on different subnets?
>
> Yes, however most radius authentication implementations i've seen are
> mac-based.  Users mac addresses stored in radius where you can then allow
> or deny.  From the client side, there's no way to "prompt" for a
> username/password.  Someone correct me if i'm wrong, but if you want
> username/password authentication, you probably need 802.1x along with
> RADIUS.
>
> ray

I know things may have changed recently, but we used to run RADIUS through a 
Livingston Portmaster when I worked for the school board 10 years ago.  It 
was for dialup ppp (and some shell accounts) but I'm not the one who 
administered that box.  If Matt Diez is still reading this list, maybe he can 
weigh in on it, since I think he's the one who set it up.  Or maybe there are 
cobwebs growing in my brain from too many hours in a cube recently ;-)

-- 
Thanks,
Fernando Vilas
fvilas at iname.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/general_brlug.net/attachments/20070403/c7f53e35/attachment-0001.bin