Actions
Bug #13878
open
IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
When importing a profile for EAP-MSCHAPv2 for example, the AuthenticationMethod is set to Certificate when it should be None. We set ExtendedAuthEnabled properly.
As a result the imported profile defaults to trying cert auth until the user edits the connection and adds their username/password.
I'm not sure if this is a recent change or what, I seem to recall it working OK in the past. The reference doc from Apple isn't too clear on some aspects here, so it probably needs testing of each type (e.g. non-EAP, EAP user auth, EAP TLS) to ensure they all behave as expected.
Updated by Jim Pingle 2 months ago
- Subject changed from Apple IPsec profile export is not setting the correct AuthenticationMethod for EAP auth to IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
Updated by Jim Pingle 2 months ago
- Status changed from New to Feedback
Fixed in IPsec Profile Wizard pkg v. 1.1, which has been committed and will be available with the next build.
Actions