lion woes...

jmclaughlin
New Contributor

Is anyone able to create a working 802.1x profile using AD authentication
for Lion? I'm not exactly sure how I have to create this profile but it
seems that you may have to use IPCU for this or so I've read.

John McLaughlin
Technical Support Specialist
Newton Public Schools

8 REPLIES 8

jarednichols
Honored Contributor

AD integration in Lion is woefully broken. I don't know about 802.1x profiles specifically, but in general there's much work that needs to be done. It may have something to do with a Kerberos ticket not being generated with an AD login. Try manually creating the ticket with Ticket Viewer or kinit at the command prompt and see if that works around it.

j
---
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

tanderson
Contributor

I've been wondering about this too given the state of AD right now with
Lion. I just got notice yesterday from Cloudpath that their XpressConnect
software is ready for Lion. We use that to help folks connect to our
wireless network (it works great btw). I'm looking forward to testing it
when I get back to the office next week to see how it plays out. Maybe by
10.7.5 AD will be working again. Or maybe by then, we won't be using it.

Tom

Matt
Valued Contributor

AD and Macs hah! That was so Tiger. Want to buy an iPhone?

Not applicable

<quote>Maybe by 10.7.5 AD will be working again.</quote>

ummm, 10.3(.t 5), 10.4(.5) 10.6(.5) and we have 10.7

is there a pattern...?? John, I am not having a go at you, more Apple and when an OS is ready for enterprise. With age come responsibility... maybe....

I would not look at lion until at least 10.7.4 (and this will give you issues, Tom had it....), 10.7.5 is a magic number... maybe it is just me! Or the doubting Thomas's in this world...

Tomos

nessts
Valued Contributor II

but if you wait until then you will barely get it rolled out before the next OS is out. and that's assuming you don't buy any new hardware between now and when you need to upgrade.

--
Todd Ness
Technology Consultant/Non-Windows Services
Americas Regional Delivery Engineering
HP Enterprise Services

Not applicable

Yup... But since 10.6.6 is a prerequisite... here's guessing they have changed the requirement of the base hardware... (hopefully)

:-)

noah_swanson
New Contributor

That would make my life 10 times easier. We ran into that with 10.6 and had horrid compatibility issues with 10.5. Somehow we made it through without requiring any hardware refreshes for users. We just deployed about 50 replacement machines and rushed them before the big lion could "roar" its way into our environment and reek havoc.

I'm putting lion on my first test machine now...here's hoping. From what it sounds I'll be in trouble since we use AD, 802.11, Kerberos, AND PGP. Strike-out.

--Noah

Not applicable

Noah - Your not alone with the specs...