<div dir="ltr">I'm using a launch agent that runs at login for all users to disable 802.1x. It's working great for me on 10.11. YMMV on other versions of the OS.<div><br></div><div>You can find the package source <a href="https://github.com/umeditor/mac-packages/tree/master/disable8021xAutomaticConnection">here</a>. Note: it requires <a href="https://github.com/unixorn/luggage">the luggage</a> to build the package and <a href="https://github.com/chilcote/outset">outset</a> to manage the script. I'm pushing it out with Munki, but it should work with Casper.</div><div><br></div><div>—Patrick</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><br></div><div>IT Manager | <span style="border-collapse:collapse"><a href="http://povertyactionlab.org/" target="_blank">J-PAL</a> | <a href="http://mit.edu" target="_blank">MIT</a><a></a> </span>| +1 617-324-2721 | <a href="mailto:mcneal@mit.edu" target="_blank">mcneal@mit.edu</a><br></div></div></div></div>
<br><div class="gmail_quote">On Mon, Dec 28, 2015 at 10:34 AM, Andy McPherson <span dir="ltr"><<a href="mailto:andymcp@mit.edu" target="_blank">andymcp@mit.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">In the past, I've had a big problem with our shared classroom computers prompting users to login via 802.1x and after users attempt to do so it endlessly attempts to auto connect and disables all network access. I can temporarily disable this by following these steps: <a href="http://kb.mit.edu/confluence/display/istcontrib/Prevent+Mac+OS+X+10.7+and+above+from+trying+to+connect+to+MIT%27s+802.1x+network+when+using+a+wired+connection" target="_blank">http://kb.mit.edu/confluence/display/istcontrib/Prevent+Mac+OS+X+10.7+and+above+from+trying+to+connect+to+MIT%27s+802.1x+network+when+using+a+wired+connection</a><div>but the issue always comes back after restarts and I have many different users logging into the same workstations.<br></div><div><br></div><div> I got around this in 10.10 by running this: chmod 644 /System/Library/SystemConfiguration/EAPOLController.bundle/Contents/Resources/eapolclient</div><div><br></div><div>but it won't work in 10.11 due to the new System Integrity Protection feature.</div><div><br></div><div>Any ideas on a workaround? Also, why does this 802.1x prompt occur in the first place and can it be disabled on a switch level?</div><div><br></div><div>Regards,</div><div>Andy</div><div><span style="color:rgb(153,153,153)"><br></span></div><div><span style="color:rgb(153,153,153)">Andy McPherson</span></div><div><div><div dir="ltr"><p><font color="#999999"><span style="font-size:12.8px">Systems Administrator</span></font></p><p><span><img src="https://mitgsl.mit.edu/sites/all/themes/mit_gsl_theme/logo.png"><br></span></p><p><font color="#999999"><span>77 Massachusetts Ave., 14N-308, Cambridge, MA 02139<br></span><span style="font-size:12.8px"><a href="mailto:andymcp@mit.edu" target="_blank">andymcp@mit.edu</a></span><span style="font-size:12.8px"> | p: <a href="tel:617.253.9776" value="+16172539776" target="_blank">617.253.9776</a> | f: <a href="tel:617.258.6189" value="+16172586189" target="_blank">617.258.6189</a></span></font></p><p><span></span></p></div></div></div></div>
<br>_______________________________________________<br>
Macpartners mailing list<br>
<a href="mailto:Macpartners@mit.edu">Macpartners@mit.edu</a><br>
<a href="http://mailman.mit.edu/mailman/listinfo/macpartners" rel="noreferrer" target="_blank">http://mailman.mit.edu/mailman/listinfo/macpartners</a><br>
<br></blockquote></div><br></div>