Re: FreeRadius Certificate Problem

2007-06-26 Thread Bryant Marsh
To Dead6re, I fixed it by copying the serial file again from the scripts directory immediately after the root certificate was created, but before the client certificate. The first thing the CA.all does is remove all files from the demoCA directory including the serial file. Hope this helps.

Re: Need help with 802.1X authentication to Active Directory

2007-06-20 Thread Bryant Marsh
Hi Ivan, Sorry I forgot to mention that I did import the cert-clt.p12 and cacert.pem to the local machine certificate store. I was reading a document that was saying that the USERS file is not necessary for authenticating to Active Directory. Is that really true? Here are my config files.

Re: Need help with 802.1X authentication to Active Directory

2007-06-20 Thread Bryant Marsh
wrote: OK. What does the Event Viewer on Win2K3 client say about failed login attempts. Has it recieved Access-Challenge packet? There might be a firewall problem. Ivan Kalik Kalik Informatika ISP Dana 20/6/2007, Bryant Marsh [EMAIL PROTECTED] piše: Hi Ivan, Sorry I forgot

Re: Need help with 802.1X authentication to Active Directory

2007-06-20 Thread Bryant Marsh
Yes, the cert-clt.p12 is imported to the personal and the cacert.pem is in the trusted root certificates. I was looking at another document that was putting chmod 0444 on the cert-clt.p12 and chmod 0400 on the cacert.pem. Then, chown to radius:users on both. Is that necessary? Thanks, Bryant.

Re: Need help with 802.1X authentication to Active Directory

2007-06-19 Thread Bryant Marsh
Hi Ivan, Here is the output of the RADIUSD -X [EMAIL PROTECTED] ~]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf main: prefix = /usr main:

Re: Need help with 802.1X authentication to Active Directory

2007-06-19 Thread Bryant Marsh
OK, you send a request, server sends challenge ... and then nothing happens. Request is repeated, so is the challenge. Have you installed (self signed) CA certificate on your XP client? Ivan Kalik Kalik Informatika ISP Hi Ivan, Yes, it took me awhile to figure out the CA.all script, but I did

Need help with 802.1X authentication to Active Directory

2007-06-15 Thread Bryant Marsh
I have FreeRadius setup as outlined by the Howto at this link. http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO I am using CENTOS 5 as the host system actiing as the SAMBA/RADIUS server. All the *.conf files are configured as directed. I have joined the radius server to

Re: Need help with 802.1X authentication to Active Directory

2007-06-15 Thread Bryant Marsh
Hi Alan, My initial config on Centos was to turn firewall off. I do have authentication going on, but it looks like the certificates are not working. I uploaded a doc with the output of the debug on the first message. Bryant -- View this message in context:

Re: Need help with 802.1X authentication to Active Directory

2007-06-15 Thread Bryant Marsh
, Bryant Marsh [EMAIL PROTECTED] piše: Hi Alan, My initial config on Centos was to turn firewall off. I do have authentication going on, but it looks like the certificates are not working. I uploaded a doc with the output of the debug on the first message. Bryant -- View this message in context

Re: Need help with 802.1X authentication to Active Directory

2007-06-15 Thread Bryant Marsh
Hi Alan, My initial config on Centos was to turn firewall off. I do have authentication going on, but it looks like the certificates are not working. I uploaded a doc with the output of the debug on the first message. http://www.nabble.com/file/p11144608/radius-auth.doc radius-auth.doc

Re: Need help with 802.1X authentication to Active Directory

2007-06-15 Thread Bryant Marsh
? Ivan Kalik Kalik Informatika ISP Dana 15/6/2007, Bryant Marsh [EMAIL PROTECTED] piše: Hi Alan, My initial config on Centos was to turn firewall off. I do have authentication going on, but it looks like the certificates are not working. I uploaded a doc with the output of the debug