Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! Iliya Peregoudov wrote: > Hello Andreas, > > Your supplicant have rejected EAP-MD5 method proposed by freeradius and > have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start > request. But your supplicant have never replied. The problem seems to be > in supplicant (AP

Re: Authenication with certifiactes

2012-07-03 Thread Iliya Peregoudov
Hello Andreas, Your supplicant have rejected EAP-MD5 method proposed by freeradius and have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start request. But your supplicant have never replied. The problem seems to be in supplicant (AP is transparent for EAP methods anyway). What

Re: Authenication with certifiactes

2012-07-03 Thread Scott Armitage
On 3 Jul 2012, at 09:16, Andreas Meyer wrote: > >> >>> Where can I read what other possibilites there are to authorize a client >>> for an AP using a radiusserver as backend. >> >> it depends what you want to do. you were talking about authenticating >> using a certificate - that would be EAP-T

Re: Authenication with certifiactes

2012-07-03 Thread Olivier Nicole
Hi, >> > Where can I read what other possibilites there are to authorize a client >> > for an AP using a radiusserver as backend. >> >> it depends what you want to do. you were talking about authenticating >> using a certificate - that would be EAP-TLS (or EAP-PEAP/TLS or EAP-TTLS/TLS) >> which me

Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! alan buxey wrote: > Hi, > > > I have no luck with this. I read in some articles to make an AP with > > Radius-Authentication, one should create cerificates with 'make all' > > in the certs-directory after editing the ca.cnf and server.cnf and > > copy the ca.pem to the client. > > ..th

Re: Authenication with certifiactes

2012-07-02 Thread alan buxey
Hi, > I have no luck with this. I read in some articles to make an AP with > Radius-Authentication, one should create cerificates with 'make all' > in the certs-directory after editing the ca.cnf and server.cnf and > copy the ca.pem to the client. ..that would be to ensure that you can configure

Re: Authenication with certifiactes

2012-07-02 Thread Andreas Meyer
Hello! alan buxey wrote: > Hi, > > 1) you are getting an access-accept - which suggest the client is using the > values > you mention - that is 'miles' with 'davis45' as the password - hence you are > using PEAP or > PAP or somesuch and not EAP-TLS certificate I have no luck with this. I rea

Re: Authenication with certifiactes

2012-07-02 Thread alan buxey
Hi, 1) you are getting an access-accept - which suggest the client is using the values you mention - that is 'miles' with 'davis45' as the password - hence you are using PEAP or PAP or somesuch and not EAP-TLS certificate 2) your access-accept should mean that the client gets an address on the

Authenication with certifiactes

2012-07-02 Thread Andreas Meyer
Hello! # radiusd -v radiusd: FreeRADIUS Version 2.1.9, for host i686-pc-linux-gnu I could need some help with authenticating users per certificate to a freeradius server. I created the certificates and copied the ca.pem the testing supplicant. Startet freeradius with radius -X and a local execute