Project

General

Profile

Actions

Bug #13878

open

IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations

Added by Jim Pingle 2 months ago. Updated 2 months ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
IPsec Profile Wizard
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

When importing a profile for EAP-MSCHAPv2 for example, the AuthenticationMethod is set to Certificate when it should be None. We set ExtendedAuthEnabled properly.

As a result the imported profile defaults to trying cert auth until the user edits the connection and adds their username/password.

I'm not sure if this is a recent change or what, I seem to recall it working OK in the past. The reference doc from Apple isn't too clear on some aspects here, so it probably needs testing of each type (e.g. non-EAP, EAP user auth, EAP TLS) to ensure they all behave as expected.

Actions #1

Updated by Jim Pingle 2 months ago

  • Subject changed from Apple IPsec profile export is not setting the correct AuthenticationMethod for EAP auth to IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
Actions #2

Updated by Jim Pingle 2 months ago

  • Status changed from New to Feedback

Fixed in IPsec Profile Wizard pkg v. 1.1, which has been committed and will be available with the next build.

Actions #3

Updated by Jim Pingle 2 months ago

  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF