[802.1x] About Mathine auth.

%3CLINGO-SUB%20id%3D%22lingo-sub-2329609%22%20slang%3D%22zh-CN%22%3E%5B802.1x%5D%20About%20Mathine%20auth.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2329609%22%20slang%3D%22zh-CN%22%3E%3CP%3Ehello%2C%3C%2FP%3E%3CP%3EI%20have%20a%20test%20program%2C%20establish%20a%20PEAP-MSCHAPV2%20link%20with%20the%20wireless%20client%2C%20extract%20MSCHAPv2%20content%2C%20and%20then%20use%20MSCHAP%20protocol%20to%20verify%20user%20credentials%20via%20NPS%20(the%20computer%20has%20been%20added%20to%20a%20domain).%20Now%20I%20have%20already%20implemented%20the%20User-Password%20method%2Cbut%20when%20change%20the%20method%20to%20Machine%20Auth%2C%20NPS%20logs%20always%20display%20user%20credentials%20do%20not%20match.%3C%2FP%3E%3CP%3ENo%20matter%20which%20auth%20method%2C%20both%20NTresponse%20and%20peerChallenge%20required%20by%20the%20MSCHAPV2%20protocol%20are%20generated%20by%20the%20wireless%20client%2C%20I%20just%20extract%20MSCHAPv2%20content%EF%BC%8Cand%20send%20to%20NPS.%20Is%20there%20any%20thing%20different%20between%20User-Password%20auth%20and%20Machine%20auth%3F%3C%2FP%3E%3CP%3EThanks%20for%20any%20suggestions.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Senior Member

hello,

         I have a test program, establish a PEAP-MSCHAPV2 link with the wireless client, extract MSCHAPv2 content, and then use MSCHAP protocol to verify user credentials via NPS (the computer has been added to a domain).Now I have already implemented the User-Password method,but when change the method to Machine Auth, NPS logs always display user credentials do not match.

         No matter which auth method, both NTresponse and peerChallenge required by the MSCHAPV2 protocol are generated by the wireless client, I just extract MSCHAPv2 content,and send to NPS. Is there any thing different between User-Password auth and Machine auth?

         Thanks for any suggestions.

0 Replies