Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, I have no luck with this. I read in some articles to make an AP with Radius-Authentication, one should create cerificates with 'make all' in the certs-directory after editing the ca.cnf and server.cnf and copy the ca.pem to the

Re: Authenication with certifiactes

2012-07-03 Thread Olivier Nicole
Hi, Where can I read what other possibilites there are to authorize a client for an AP using a radiusserver as backend. it depends what you want to do. you were talking about authenticating using a certificate - that would be EAP-TLS (or EAP-PEAP/TLS or EAP-TTLS/TLS) which means the

Re: Authenication with certifiactes

2012-07-03 Thread Scott Armitage
On 3 Jul 2012, at 09:16, Andreas Meyer wrote: Where can I read what other possibilites there are to authorize a client for an AP using a radiusserver as backend. it depends what you want to do. you were talking about authenticating using a certificate - that would be EAP-TLS (or

Re: Authenication with certifiactes

2012-07-03 Thread Iliya Peregoudov
Hello Andreas, Your supplicant have rejected EAP-MD5 method proposed by freeradius and have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start request. But your supplicant have never replied. The problem seems to be in supplicant (AP is transparent for EAP methods anyway).

Re: Authenication with certifiactes

2012-07-03 Thread Andreas Meyer
Hello! Iliya Peregoudov iperegu...@cboss.ru wrote: Hello Andreas, Your supplicant have rejected EAP-MD5 method proposed by freeradius and have requested for EAP-TTLS method. freeradius have sent EAP-TTLS/Start request. But your supplicant have never replied. The problem seems to be in

Authenication with certifiactes

2012-07-02 Thread Andreas Meyer
Hello! # radiusd -v radiusd: FreeRADIUS Version 2.1.9, for host i686-pc-linux-gnu I could need some help with authenticating users per certificate to a freeradius server. I created the certificates and copied the ca.pem the testing supplicant. Startet freeradius with radius -X and a local

Re: Authenication with certifiactes

2012-07-02 Thread alan buxey
Hi, 1) you are getting an access-accept - which suggest the client is using the values you mention - that is 'miles' with 'davis45' as the password - hence you are using PEAP or PAP or somesuch and not EAP-TLS certificate 2) your access-accept should mean that the client gets an address on the

Re: Authenication with certifiactes

2012-07-02 Thread Andreas Meyer
Hello! alan buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, 1) you are getting an access-accept - which suggest the client is using the values you mention - that is 'miles' with 'davis45' as the password - hence you are using PEAP or PAP or somesuch and not EAP-TLS certificate I have no luck

Re: Authenication with certifiactes

2012-07-02 Thread alan buxey
Hi, I have no luck with this. I read in some articles to make an AP with Radius-Authentication, one should create cerificates with 'make all' in the certs-directory after editing the ca.cnf and server.cnf and copy the ca.pem to the client. ..that would be to ensure that you can configure