Posted on 02-01-2019 07:54 AM
I recently started at a new office, and the previous IT guy had set up the WiFi with 802.1x using Onelogin Radius - This has caused a bunch of issues as currently the wifi does not connect until after the user has logged in, meaning that everyone is currently logging in with a Cached old password.
The current configuration profile is set to TTLS as the EAP Type, PAP as inner authentication - valid Onelogin credentials are requested from within Network Preferences by clicking Connect and entering credentials.
Currently when the passwords expires, the user immediately gets kicked off out the WiFi, and the user has to go on the guest wifi, reset their onelogin password, and then update the password in the mac keychain to connect again. It's a bit of a clunky mess.
I attempted to make a copy of the current configuration, and ticked the box to "use as a login window configuration" with the hope that it would bring login passwords back in to sync. On a test machine this worked and I was able to sign in with my newest credentials. Unfortunately it did not let me log in if the the password has expired, or if I had set the password to "force user to update"
Does anyone have any idea how I could bring back the ability for users to update their passwords at the login screen? Would there be any way of getting the "your password has expired" popup back?
Any help would be much appreciated!