Re: No EAP/TLS with XP SP3 since End December

2011-01-05 Thread Alexandros Gougousoudis
Alexandros Gougousoudis schrieb: (after I went into the xmas holidays) the Radius-Auth stopped working. I changed nothing at the Freeradius-Server. I suspect an MS-Update, major-security updates are rolled out automatically here. But I don't know which one. Thanks for all replies. It

No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi, I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 with EAP/TLS on an Ethernet-Port. I use Linksys switches as authenticators. I think since end December (after I went into the xmas holidays) the Radius-Auth stopped working. I changed nothing at the Freeradius-Server. I

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alan DeKok
Alexandros Gougousoudis wrote: I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 with EAP/TLS on an Ethernet-Port. I use Linksys switches as authenticators. I think since end December (after I went into the xmas holidays) the Radius-Auth stopped working. I changed nothing at

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Phil Mayers
On 01/03/2011 09:40 AM, Alexandros Gougousoudis wrote: Hi, I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 That's really old. Upgrade. with EAP/TLS on an Ethernet-Port. I use Linksys switches as authenticators. I think since end December (after I went into the xmas

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Alan DeKok schrieb: See if your certificate has expired. Nope, that was the first I've checked. Server and client-cert are still valid. It seems, that no XP client (even some old SP2 clients) can logon anymore, Ubuntu can. Is there some possibility to force a Login OK as a

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Phil Mayers
On 01/03/2011 11:09 AM, Alexandros Gougousoudis wrote: Alan DeKok schrieb: See if your certificate has expired. Nope, that was the first I've checked. Server and client-cert are still valid. It seems, that no XP client (even some old SP2 clients) can logon anymore, Ubuntu can. Is there

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi Phil, Phil Mayers schrieb: To be clear, all windows clients fail? But other clients succeed? Exactly, Ubuntu can authenticate, all XP not. It is possible a windows update has removed the intermediate certificate from the client(s). IIRC Microsoft have done this in the past, expecting the

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread JDL
On Jan 3, 2011, at 4:40 AM, Alexandros Gougousoudis wrote: I think since end December (after I went into the xmas holidays) the Radius-Auth stopped working. First, I know almost nothing regarding EAP. However, I wanted to mention that many of the root certificates have been updated to

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi JDL, that's a good point, I didn't think about that. But it's not my problem, I have 4096 keylength. It should be ok. thx Alex JDL schrieb: December. My understanding was that this was only to affect new certificates, however, since certificates are involved in the EAP process, you

RE: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Andrew Paternoster
To: FreeRadius users mailing list Subject: Re: No EAP/TLS with XP SP3 since End December Hi JDL, that's a good point, I didn't think about that. But it's not my problem, I have 4096 keylength. It should be ok. thx Alex JDL schrieb: December. My understanding was that this was only