Wifi 802.1x with LDAP Groups

(2019-04-10)

Problem

Wifi WPA/WPA2 access tests that depend on a LDAP (Active Directory) user group fail.

Solution

You can't use a LDAP group for Wifi authentication because of the way that the user credentials are encoded before being passed through -- for some reason the AD server can't deal with them.

You have to use a Radius server (ie a Network Policy Server).

(Source)