Extreme Wing 7.9.6.1 Integation with LDAP

[Ahmed_101]

Hi,
i tried to do 802.1x and captive portal with LDAP in Wing controller.
i followed this articles but it does not seems to work in my lab 
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080568
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080854


the ldap is Windows AD.
here is my configs 

vx9000-99B838(config-radius-server-policy-test)#show context

radius-server-policy test

authentication data-source ldap

authentication eap-auth-type peap-mschapv2

ldap-server primary host 192.168.10.175 port 389 login "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" bind-dn "cn=Users,dc=ahmed,dc=loc" base-dn "cn=wm3400,cn=Users,dc=ahmed,dc=loc" passwd 0 12345678 passwd-attr UserPassword group-attr cn group-filter "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-userDn})))" group-membership radiusGroupName start-tls net-timeout 10

ldap-agent primary domain-name AHMED domain-admin-user wm3400 domain-admin-password 0 12345678
any help will be appreciated.

[Ahmed_101]

Update : 
Now the Wing controller can communicates with ldap and it seems that the search for users is working fine but the clients cant authenticate bcs the internal radius is rejecting the requests 

WifiController-1*#show radius server stats

Access-Accepts                 0

Access-Challenges              0

Access-Rejects                 1

Access-Requests                2

Accounting-Requests            0

Accounting-Responses           0

Acct-Dropped-Requests          0

Acct-Duplicate-Requests        0

Acct-Invalid-Requests          0

Acct-Malformed-Requests        0

Acct-Unknown-Types             0

Auth-Dropped-Requests          0

Auth-Duplicate-Requests        0

Auth-Invalid-Requests          0

Auth-Malformed-Requests        0

Auth-Responses                 1

Auth-Unknown-Types             0

what did i miss ? 

[Angelo_Cargnel]

Please find attached some slides and two How-To's regarding 802.1x with PEAP and LDAP.
I hope they are useful...

[Ahmed_101]

Hi thank you. 
i followed the guides and i ran wireshark in AD but there no LDAP packets coming to the AD.

[Luis_Agner]

Hi Ahmed,

Which part is failing (802.1X or captive portal)?
Do you have any authentication or LDAP logs from the WiNG controller to share?

Without the logs it’s hard to identify whether the issue is LDAP binding, user lookup, or PEAP authentication.