user397220's questions

We are using an XML profile (Generated with Apple Configurator) to configure our mac's wifi settings. The main thing we wish to control is SSID Auto-Join, which should be off.

We can set this in the profile and it works. However, a user is able to manually remove the wifi network from the system preferences. If they manually add it back, then Auto-Join will be enabled. The only way to fix this, is to re-install the profile.

Does anyone know of a way to either: a) Detect that Auto-Join is enabled on a WiFi network from the command line or b) Prevent changes to WiFI networks when there is a profile controlling the network.

Help is appreciated, thanks!

I'm using FreeRadius with a Ubitquiti WiFi AP with 802.1x auth using EAP-TLS (mutual client/server cert based auth). This is working well for static VLANs (i.e. specified on the AP).

I'd like to offload the VLAN assignment to Radius so that different users can be assigned to different VLANs.

I am not sure how to do this using EAP-TLS. All docs I've found online use the users file but are using other EAP methods.

So for, I've put this at the top of my /etc/freeradius/users file:

DEFAULT        Tunnel-Medium-Type = 6
               Tunnel-Private-Group-ID = [12],
               Tunnel-Type = VLAN

However no VLAN is assigned by Radius.

I'm not sure where to go from here. Perhaps I need something inside the tls section of /etc/freeradius/eap.conf to tell it to use the users file?

Help is appreciated, thanks!