Re: HELP: EAP/TLS - XP

2003-01-31 Thread Artur Hecker
hi philip thanks for the point, david probably just has to check the extensions and other things. however, it seems that the server certificate isn't accepted, not the client certificate. something has to be wrong, since in my case, too, it worked fine with cisco and orinoco equipment, since

RE: HELP: EAP/TLS - XP

2003-01-30 Thread Philip Blow
David, Artur, This problem appears to be caused by having the Server Authentication and Client Authentication properties set in the certificate. If you disable all extended certificate properties except the Client Authentication in the Client certificate on the XP machine the EAP authentication

Re: HELP: EAP/TLS - XP

2003-01-29 Thread Artur Hecker
hi David ok, it's good news then... if you followed exactly the steps, it should work fine. to find the error, just put the same certificate which is available at the server side on your XP machine and open it using the crypto extensions (double-click). XP should say you what is missing. the

Re: HELP: EAP/TLS - XP

2003-01-28 Thread David Baer
The problem has been partially solved (or let's say: narrowed). Somehow the server's certificate is not accepted by the XP-supplicant. If the Validate server certificate check box is unchecked, the authentication succeeds. To leave the server's certificate unvalidated is not very desirbale

Re: HELP: EAP/TLS - XP

2003-01-22 Thread Artur Hecker
hi David Baer wrote: hi, thanks for looking at the matter, Artur. in fact, unless you shortened your post, there seems to be two requests one after another or am i wrong? because radius actually doesn't do anything about the wrong request. it denies the next one... well, it's perhaps

Re: HELP: EAP/TLS - XP

2003-01-20 Thread Jeffery Huang
Dear David, Do you work well via md5? I cannot work fine with ap-2000 too? :( I guess it is AP problem! ¦b ¶g¤@, 2003-01-20 14:39, David Baer ¼g¹D¡G I'm trying to get XP and freeRADIUS working together. I encountered a problem that has been reported here before

Re: HELP: EAP/TLS - XP

2003-01-20 Thread David Baer
Hi Jeffrey, Do you work well via md5? I cannot work fine with ap-2000 too? :( I guess it is AP problem! I don't think it's an AP problem, because Raymon McKey (http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm) is working with the same AP. i never tried with md5, did it work with you?

Re: HELP: EAP/TLS - XP

2003-01-20 Thread Artur Hecker
hi I don't think it's an AP problem, because Raymon McKey (http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm) is working with the same AP. i never tried with md5, did it work with you? and you probably can't since you use XP SP1 which does not offer EAP/MD5 for wireless anymore :) do

Re: HELP: EAP/TLS - XP

2003-01-20 Thread David Baer
hi, thanks for looking at the matter, Artur. in fact, unless you shortened your post, there seems to be two requests one after another or am i wrong? because radius actually doesn't do anything about the wrong request. it denies the next one... well, it's perhaps normal. well strange is (or