Bad times in corporate wireless networks
FreeRADIUS is great, and I wouldn't use anything else.But to increase the adoption of EAP, what would be better is a super simple daemon, you point it at LDAP or a file, and it sets itself up for PEAP or EAP-TTLS and you just have to point your APs at it. FreeRADIUS is far to complex for most use cases.I note that many APs now come with nice web interfaces and can integrate with LDAP and Active Directory directly, which is a great step forward.Ideally AD would support something like SRP directly so you wouldn't even need server certificates.