Access Connections and EAP-TTLS wireless authentication

[jonu]

Does anyone know how (if) one can authenticate into a wireles network with EAP-TTLS and PAP for the "inner" authentication? One can do this with Access Connections except that it offers only MS-CHAP-V2 as a protocol for inner authentication instead of PAP (which is actually less secure than MS-CHAP).

My campus uses this authentication scheme through its Odyssey server. I _could_ just download the Odyssey client, but that seems klutzy to have yet another program to manage wireless networks. Plus, with OS X supporting this protocol natively within the OS, doesn't seem too unreasonable to hope that Access Connections might as well. I cannot ditch the Access Connections because I use it to get onto a LEAP network as well.

I have already Googled the Internet as well as searched the IBM site. So far, twolevels of technical support at IBM haven't been too helpful (waiting on the 3rd).

[BerniG]

I have the same problem. Has anyone found a solution to get PAP working (my only choice is MS-Chapv2)? I think it would be easy for Lenovo to integrate this

[Wiz]

It's not supported by access connections at this time so it won't work. Not sure why IBM/Lenovo support is not aware of that. They should have been able to give you that info.
As you said you could use the Odyssey client, but you could also use meetinghouse SecureConnect client (http://www.mtghouse.com/). secureconnect support both EAP-TTLS with PAP and LEAP in addition to most other EAP types. Actually i cannot think of anything at the moment which is not supported by secureconnect. Using secureconnect you could use one client only according to the requirements you specified here, but of course it's not free. You can download a trial from their website to see if it cover your needs.
Whether or not access connections will support EAP-TTLS with PAP in the future and when it will be supported i have no idea.

I agree that it should be easy to implement into access connections, but currently it's not.

[BerniG]

Is it possible to make a feature request to the developers of Access Connections? The support only said that it isn't possible and didn't know anything more