RADIUS against IMEI

User authentification for Wifi use 802.1x protocol.
To connect devices need a WPA supplicant such as SecureW2
Depending of the supplicant you use you will or not will be able to use do a SSO with the windows domain login/password.
iPhone and iPod touch have built in WPA supplicant. I don't know for PSP/BB. SecureW2 has a Windows Mobile version.

I'm sure that you could enable a captive portal for WiFi only without having to create to IP Network. You just need to put wireless access in a vlan and wired access in another vlan then put the portal between both vlan. This is like a transparent firewall.

802.1x need to have a supplicant on computers. If computers that need to use the Wifi are known you just have to setup the supplicant on them and it's a great solution. If you want to make your wireless access accessible by visitor or things like that it could be a nightmare because they need the supplicant etc..

A captive portal is a bit less secure and need user to authenticate manually each time they connect. It can be a bit borring.

A good solution from my point of view is too have both. A 802.1x access that give you the same as if you were wired on the lan and a captive portal that give you access to less things (access to internet port 80, limited access to local lan, ...)

What's going on is that without the rest of the structures required, the linux system doesn't have any information about user 'cory'. Things like UID/GID, shell, homedirectory, whatever.

You can set up the local user account, then tell PAM to check for a valid password against RADIUS.

What you really want to do is set up LDAP. This will let you define complete Unix user accounts in a central database. Then you would configure your RADIUS server to do validations against the LDAP database for those devices which can use it.