Cisco Cisco Aironet 350 Wireless LAN Client Adapter Release Notes

Page of 34
29
Release Notes for Cisco Aironet 802.11a/b/g Client Adapters (CB21AG and PI21AG) Install Wizard 4.2
OL-15721-02
  Caveats
CSCsl03991—Authentication failure when changing profiles
Even if a username and a password are correct, authentication fails when changing profiles.
Workaround: None.
CSCsl12054—Two-minute delay during login after reboot
When the user logs in after reboot, there is a two-minute delay (sometimes longer) after the user 
enters a valid username and password into the Window GINA If the user logs off and then back in, 
there is no delay.
This issue occurs intermittently on various Hewlett-Packard laptops. The issue occurs whether or 
not machine authentication has been enabled.
Workaround: None.
CSCsl74307—ADU driver causes one- or two-minute Windows login delays on some of laptops
Delays occur when trying to log in via the LAN NIC to a domain if the laptop has the CB21AG 
driver. After the driver is deleted, the laptop only takes three seconds to log in to the domain.
Workaround: None.
CSCsl90324—EAP-FAST authentication fails when Validate Server Identity is enabled
A profile is configured with 802.1X EAP-FAST authentication. The Validate Server Identity option 
and auto-provisioning are enabled. The Trusted Root Certification Authorities is set to Any. 
Authentication fails. If the Trusted Root Certification Authorities is valid, the authentication still 
fails. If an existing PAC is selected, the authentication succeeds.
Workaround: None.
CSCsm02824—Case-sensitive username passes EAP-FAST authentication but generates different 
PACs
Different PACs are created for the same profile when the user enters a username but changes the case 
of the username characters. Regardless of how the username is entered, the user enters the same 
password and can authenticate. However, a PAC for each variation of the same username is created.
Workaround: None.
CSCsm02911—Token account can be used in the user fields for PEAP-GTC authentication
In the ADU, a profile is configured with 802.1X PEAP-GTC. The static password option is enabled. 
An account is generated from software token or hardware token. This account is entered in the static 
username and password fields. The client adapter successfully associates to the access point.
Workaround: None.
CSCsm02917—Domain user account can be used in the token configuration
In the ADU, a profile is configured with PEAP-GTC, and the token option is enabled. The domain 
user account name is entered as the token account name. The profile is activated, and token one-time 
password dialog box appears. The domain user account password is entered. The adapter 
authenticates successfully.
Workaround: None.
CSCsm22095—802.1X profile changed after being converted by profile migration tool
A profile that uses 802.1X LEAP is configured with the Automatically Prompt for User Name and 
Password option enabled. The profile is created with the 350 ACU. The ADU is installed, and the 
profile migration tool (PMT) is run. When the same profile is verified in the ADU, the profile uses 
802.1X LEAP with the Use Windows User Name and Password option.
Workaround: None.