Hi, > Hi, > > > - user auth after the doain controler has accepted logon. > > Does anybody know if the windows XP supplicant is able to do this ? > > Do I need a better supplicant ? aegis? secureW2? Funk Odissey ? > i believe it wont do anything useful or multifunctional like > you require. a good option would be to use the supplicant > so authenticate the system, then use something like pGina > to do the user authentication - that can then authenticate > the user against a RADIUS server > > pgina - http://pgina.xpasystems.com/info/ > > > alan In fact, XP supplicant seems to allow only one auth method (EAP-TLS or PEAP). If I use TLS machine auth will be OK, so I can log on my domain and get my roaming profile. But If want to keep my network connection, I have to use a user cert too or do the registry hack (AuthMode set to 2). If I choose to use PEAP, computer auth, as far as I understood, will never work, so I won't be able to log on my domain... A solution may be a supplicant which first tries to make a network connection (using username/password), and then, if it succeeds, tries to authenticate user against the domain. I don't see how pgina will help me... sorry. Regards, Jeremy |
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
