Voltar
-
Título
When using the EAP agent, the Windows password has to be entered twice. -
Descrição
When using the EAP agent, the Windows password has to be entered twice.
-
Causa
The first password prompt is from Windows VPN client and is only used by Windows, it is not passed to or validated by the Defender EAP Agent / Defender Security Server. Even if the wrong password is entered the Defender authentication will continue.
The next prompt is from Defender:
-
Resolução
If wanted, the password prompt can be removed using Microsoft’s CMAK (Connection Manager Administration Kit), selecting the "Advanced customization" checkbox and setting the HidePassword option in the [Connection Manager] section. Click on Drop down in CMAK Wizard for this feature.Whether the Password box appears in the Connection Manager logon dialog box when using dial-up connections.Edit the CMS file under the line: PasswordHandlingCreate line: "HidePassword=1"0 (default) = Display the box1 = Do not display the box.If the field is hidden, the data is considered optional.
Notes:- Do not edit any entry in the .cms file if it can be set by using the CMAK wizard, because the CMAK wizard may overwrite entries in the .cms file.- If an entry is valid in both .cms and .cmp files, edit only the .cms entry.- Make sure that locations are specified either as the full path or in reference to the location of the .cmp file.More information here
An example below with the Microsoft password prompt removed.
