joanroldan wrote: > I have followed your advise and I went back to the default config. I have > read the: > > http://deployingradius.com/documents/configuration/certificates.html > > And I have followed it step by step. Testing first the PAP auth with an > entry in users.conf and it worked fine. Next I add the Wireless LAN > Controller in clients.conf and change the default eap_type with peap.
That is *not* the next step in the guide. Follow the steps in the guide, there's a *reason* there is more than one step. > I get the next warning: > > Debug: WARNING: > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > Debug: WARNING: !! EAP session for state 0xc729a88ac72ab1dd did not finish! > Debug: WARNING: !! Please read > http://wiki.freeradius.org/Certificate_Compatibility > Debug: WARNING: > !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! > > Testing with an WinXP and Win7 client, so I do not think its a Supplicant > issue. You're wrong. It's almost *always* a supplicant issue. > The supplicant config is PEAP with MSCHAPv2, and no certificate validation. > > I have a look to certs/README file, and I have studied the ./bootstrap > script I make sure xpextensions are applied.I also launch > > rm -f *.pem *.der *.csr *.crt *.key *.p12 serial* index.txt* > > Before modifying the server.cnf and ca.cnf and launch bootstrap script > again. > > I always get the same warning, I do no undestand why. In > http://deployingradius.com says it just worked, but not in my enviorment. Make sure that the root certificate is on the Windows machine, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html