Hi Jeremy, Unfortunately, the windows supplicant won't let you do that. Various third party supplicants can do it but not the one included by MS.
Again, I know that the Funk Odyssey client can do this because I've done it myself (before I got GINA working). My main area of dissatisfaction with this mechanism is the administrative load of generating, deploying and maintaining a per-host certificate. Rgds, Guy >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On >Behalf Of Jérémy Cluzel >Sent: 02 September 2005 15:41 >To: freeradius-users@lists.freeradius.org >Subject: Windows XP supplicant limitation ? > >Hi, > >I want to use >- EAP-TLS for machine auth (with cert.) >then >- EAP-PEAP for the user auth (with login/password) >I managed to make both to work alone but not together... >I just want to follow the xp supplicant behaviour: >- computer auth. before logon to gain network access to the domain >controler. >- user auth after the doain controler has accepted logon. >Does anybody know if the windows XP supplicant is able to do this ? >Do I need a better supplicant ? aegis? secureW2? Funk Odissey ? > >Thanks > >Jeremy >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html > This e-mail is private and may be confidential and is for the intended recipient only. If misdirected, please notify us by telephone and confirm that it has been deleted from your system and any copies destroyed. If you are not the intended recipient you are strictly prohibited from using, printing, copying, distributing or disseminating this e-mail or any information contained in it. We use reasonable endeavours to virus scan all e-mails leaving the Company but no warranty is given that this e-mail and any attachments are virus free. You should undertake your own virus checking. The right to monitor e-mail communications through our network is reserved by us. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
