[EMAIL PROTECTED] wrote:
>    I was thinking about eap/tls but it looks very complicated to me,
> because it need's to install certificates on the client (can this be
> ommited?).

  Yes.  Use EAP-TTLS, or EAP-PEAP.

>    Then there is the eap ms-chap authentification. But I have no idea how
> to configure it. 

  On the server side, the instructions are in the comments in
radiusd.conf.  It should take near-zero configuration.

>    If you can point me to some good info about radius and ms-chap I would
> be thanksfull, or if you can supply me with some small example of eap -ms
> chap configuration.

  Most wireless clients do not do EAP-MSChap.  Use EAP-TTLS or
EAP-PEAP.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to