[EMAIL PROTECTED] wrote: > I was thinking about eap/tls but it looks very complicated to me, > because it need's to install certificates on the client (can this be > ommited?).
Yes. Use EAP-TTLS, or EAP-PEAP. > Then there is the eap ms-chap authentification. But I have no idea how > to configure it. On the server side, the instructions are in the comments in radiusd.conf. It should take near-zero configuration. > If you can point me to some good info about radius and ms-chap I would > be thanksfull, or if you can supply me with some small example of eap -ms > chap configuration. Most wireless clients do not do EAP-MSChap. Use EAP-TTLS or EAP-PEAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html