[Macpartners] 802.1x Authentication

[Patrick McNeal]

I'm using a launch agent that runs at login for all users to disable
802.1x. It's working great for me on 10.11. YMMV on other versions of the
OS.

You can find the package source here
<https://github.com/umeditor/mac-packages/tree/master/disable8021xAutomaticConnection>.
Note: it requires the luggage <https://github.com/unixorn/luggage> to build
the package and outset <https://github.com/chilcote/outset> to manage the
script. I'm pushing it out with Munki, but it should work with Casper.

—Patrick


IT Manager | J-PAL <http://povertyactionlab.org/> | MIT <http://mit.edu> |
+1 617-324-2721 | mcneal at mit.edu

On Mon, Dec 28, 2015 at 10:34 AM, Andy McPherson <andymcp at mit.edu> wrote:

> In the past, I've had a big problem with our shared classroom computers
> prompting users to login via 802.1x and after users attempt to do so it
> endlessly attempts to auto connect and disables all network access. I can
> temporarily disable this by following these steps:
> http://kb.mit.edu/confluence/display/istcontrib/Prevent+Mac+OS+X+10.7+and+above+from+trying+to+connect+to+MIT%27s+802.1x+network+when+using+a+wired+connection
> but the issue always comes back after restarts and I have many different
> users logging into the same workstations.
>
>  I got around this in 10.10 by running this: chmod 644
> /System/Library/SystemConfiguration/EAPOLController.bundle/Contents/Resources/eapolclient
>
> but it won't work in 10.11 due to the new System Integrity Protection
> feature.
>
> Any ideas on a workaround? Also, why does this 802.1x prompt occur in the
> first place and can it be disabled on a switch level?
>
> Regards,
> Andy
>
> Andy McPherson
>
> Systems Administrator
>
>
> 77 Massachusetts Ave., 14N-308, Cambridge, MA 02139
> andymcp at mit.edu | p: 617.253.9776 | f: 617.258.6189
>
>
> _______________________________________________
> Macpartners mailing list
> Macpartners at mit.edu
> http://mailman.mit.edu/mailman/listinfo/macpartners
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/macpartners/attachments/20151228/fa7a999c/attachment.html