Re: PEAP/TTLS and Client certificates

rdeboer wrote: I already enabled said option, the only problem is that this doesn't enforce the use of PEAP with a client certificate, as the TLS module is enabled and configured, it allows you to log in with just a client certificate using TLS. What I want is to enforce the use of not just

Re: PEAP/TTLS and Client certificates

So a few weeks later and still not much further.. Has anyone got an idea how I could force PEAP sessions to supply client a client certificate? -- View this message in context: http://freeradius.1045715.n5.nabble.com/PEAP-TTLS-and-Client-certificates-tp3238845p3289077.html Sent from

Re: PEAP/TTLS and Client certificates

rdeboer wrote: So a few weeks later and still not much further.. Has anyone got an idea how I could force PEAP sessions to supply client a client certificate? Read raddb/eap.conf. Look for client cert Alan DeKok. - List info/subscribe/unsubscribe? See

Re: PEAP/TTLS and Client certificates

with a client cert. Suppose I should have made that clearer in my post, sorry about that. -Remy -- View this message in context: http://freeradius.1045715.n5.nabble.com/PEAP-TTLS-and-Client-certificates-tp3238845p3289088.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

Re: PEAP/TTLS and Client certificates

I'm using the Juniper Odyssey Access Client, you can download a trial from the Juniper website. So far it's the only supplicant I've come across that allows for PEAP or TTLS with client certificates. Drawback being you have to buy licenses for each instance of it running inside the company

Re: PEAP/TTLS and Client certificates

Which OS? David On Thu, Nov 4, 2010 at 9:00 AM, rdeboer rem...@gmail.com wrote: I'm using the Juniper Odyssey Access Client, you can download a trial from the Juniper website. So far it's the only supplicant I've come across that allows for PEAP or TTLS with client certificates. Drawback

Re: PEAP/TTLS and Client certificates

Mostly windows 7 but linux and OSX would be nice too.. -- View this message in context: http://freeradius.1045715.n5.nabble.com/PEAP-TTLS-and-Client-certificates-tp3238845p3250786.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See

Ignoring client certificates

Hi, Is there any option/configuration so that we can ignore the certificates sent by user? I am using eap-ttls mschapv2 and want to authenticate user by its password only not by certificate sent by user. Please help ,Regards Vijay Badola P We have responsibility to the environment.

Re: Ignoring client certificates

Vijay Badola wrote: Hi, Is there any option/configuration so that we can ignore the certificates sent by user? Source code modifications. See the OpenSSL API. As always, patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Client Certificates

Hello, Do I need separate certificate for each client or can I use one cert for all clients ? Is there easy way to generate bunch of them using supplied scripts ? Regards Paul - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PEAP + EAP-TLS: client certificates

Hi, Sorry for the trivial questions but here I go: I think I configured freeradius correctly for EAP-TLS and PEAP with ms-chap with authenticates using the ntlm_auth helper application. If I try to connect from a Windows client via a wireless AP WIFIAP1 with Active Directory user1 I see this

Re: PEAP + EAP-TLS: client certificates

If I try to connect from a Windows client via a wireless AP WIFIAP1 with Active Directory user1 I see this in the log: Thu Oct 22 10:05:49 2009 : Auth: Login OK: [user1/via Auth-Type = EAP] (from client WIFIAP1 port 0 via TLS tunnel) Thu Oct 22 10:05:49 2009 : Auth: Login OK: [user1/via

Re: PEAP + EAP-TLS: client certificates

--- On Thu, 10/22/09, Ivan Kalik t...@kalik.net wrote: If I install a self-signed certificate on another Windows client and connect via EAP-TLS then I can connect without having to use an Active Directory user, as expected. I'm wondering if I can *require* both a certificate on the

Re: PEAP + EAP-TLS: client certificates

Is this the option? EAP-TLS-Require-Client-Cert = Yes I'm not sure where I should place it. Authorize section of inner-tunnel virtual server I think. Use unlang (update control ...). Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

Re: PEAP + EAP-TLS: client certificates

PS. No, default virtual server looks more like it. Won't hurt to try both. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PEAP + EAP-TLS: client certificates

--- On Thu, 10/22/09, Vieri rentor...@yahoo.com wrote: From: Vieri rentor...@yahoo.com Subject: Re: PEAP + EAP-TLS: client certificates To: freeradius-users@lists.freeradius.org Date: Thursday, October 22, 2009, 9:05 AM --- On Thu, 10/22/09, Ivan Kalik t...@kalik.net wrote: If I

EAP: client certificates and double authentication messages

Hi, I am using freeradius successfully, but I still have some questions. Fistly, how can I disable to verify client certificates? Mon Sep 5 12:17:12 2005 : Error: TLS_accept:error in SSLv3 read client certificate A I mean I have disabled the comand in the config-file. But still I get

Re: EAP: client certificates and double authentication messages

Hi again Flo, remember last TNC in Catania? :-) I am using freeradius successfully, but I still have some questions. Fistly, how can I disable to verify client certificates? Mon Sep 5 12:17:12 2005 : Error: TLS_accept:error in SSLv3 read client certificate A This is an error

Re: PEAP with client certificates

Khurram Jahangir [EMAIL PROTECTED] wrote: I think the problem lies in the following part of the Radiusd log Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap:

Re: PEAP with client certificates

Hi Again, Correct me if I misunderstood you. You mean that EAP-TLS inside of EAP-PEAP is not possible at all and is wrong or it is correct and freeradius might support this in future. Regards Khurram --- Alan DeKok [EMAIL PROTECTED] wrote: Khurram Jahangir [EMAIL PROTECTED] wrote: I

Re: PEAP with client certificates

Khurram Jahangir [EMAIL PROTECTED] wrote: You mean that EAP-TLS inside of EAP-PEAP is not possible at all and is wrong or it is correct and freeradius might support this in future. FreeRADIUS does not support this. It may in the future, if someone supplies a patch. Alan DeKok. - List

PEAP with client certificates

Hi All, I have set up freeradius server 1.0.1 and I am using windows XP 802.1x client. The authenticator is an HP 2524 switch. In the 802.1x windows xp client I want to setup PEAP and instead of using MSCHAPV2, I want to use the certificates as follows Under Authentication, EAP type

Re: PEAP with client certificates

Khurram Jahangir [EMAIL PROTECTED] wrote: I thought I should chnage default_eap_type to tls under peap so I changed peap in eap.conf as following. That won't work. But i am getting the following errors .. ... You're getting a lot more errors than that, and errors which tell you what the