PEAP with MSCHAPV2 (windows xp remembers the username/password in cache)

Hi All,

I have set up freeradius server 1.0.1 and I am using windows XP 802.1x client. The authenticator is an HP 2524 switch. I have test the setup with PEAP using MSCHAP V2 and it worked fine for me.

My problem is that I want to use this mechanism for VLAN selection so that depending on the username/password, the user gets the VLAN from the freeradius server. Now the problem here is that windows xp stores the username and password in the cache and in case user wants to get authenticated to and get assigned to another vlan, the username/password should be entered again.

I can go in registry and delete the file and in that case, when I reconnect the client, I will be asked to enter the username/password. I wonder if it is possible to tell windows not to store the username/password in the cache.

May be any of you knows about this. I will really appreciate any kind of help regarding this.

Best Regards

Khurram

 

What registry location?

 

The registry location is HKEY_CURRENT_USER\Software\Microsoft\Eapol\UserEapInfo

 

Sorry for the delay in answering you. Was fishing from Friday AM thru Sunday PM and still sorta tired. Will give a sensible answer tomorrow evening if no one else has by then.

I can safely state that at 60 years of age, I am way too dang old to spend a weekend sleeping on the ground and should really have sense enough to haul a cot or air matress along.