For peap you need to import the CA certificate into trusted root store on Win XP.
Ivan Kalik Kalik Informatika ISP Dana 30/4/2008, "George KNIGHT" <[EMAIL PROTECTED]> piše: >Hello Marco, >I really appreciate your help. The link you gave is way more helpful then >most other stuff on the net. > >One thing that still not clear to me is which certificates I have to place >to the Windows? There are so much information about certificates but no one >clearly says which certificate goes where at the server and the XP client. > >After I installed the FreeRadius 2.0.2 on my SuSE SLES box, under the >/etc/raddb/certs folder, there are following certificates; > >server.crt - server.key - server.pem - server.cnf - server.csr - server.p12.. > >Can I test my environment by using these certificates? I just don't know how >to use the certificates. Last week I was messing around the openssl to >create certificates but ended up mixing everything. That's why I reinstalled >the whole OS, reinstalled the freeradius cleanly again. Before I go ahead >and mess around again, I just want to have the instructions. > >One more thing, I won't be using any LDAP or AD in a Windows environment. I >just want my clients to be authenticated against freeradius AAA based on >PEAP. > >Thank you. > > >On Wed, Apr 30, 2008 at 3:39 AM, Marco Gaiarin <[EMAIL PROTECTED]> wrote: > >> Mandi! George KNIGHT >> In chel di` si favelave... >> >> > My question is I have been looking for a HOWTO paper for a beginner to >> set >> > freeradius as an AAA server in a wireless environment to Windows XP SP2 >> > clients. I will use Windows' own PEAP client. Is there such a paper >> someone >> > can give me the link? >> >> A very good starting point is: >> >> >> http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO >> >> if you have a samba domain, simply ignore all the 'AD' stuff, the real >> point here are make ntlm_auth work, normally it suffices to install >> winbindd. >> >> -- >> dott. Marco Gaiarin GNUPG Key ID: 240A3D66 >> Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/ >> Polo FVG - Via della Bontŕ, 7 - 33078 - San Vito al Tagliamento (PN) >> marco.gaiarin(at)sv.lnf.it tel +39-0434-842711 fax +39-0434-842797 >> >> Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! >> http://www.lanostrafamiglia.it/chi_siamo/5xmille.php >> (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA) >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html