Re: Conf PEAP

2008-12-18 Thread Alan DeKok
Martin Silvero wrote: I am configuring PEAP and there is not much information about it, http://deployingradius.com There is a complete and detailed set of instructions for configuring EAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Conf PEAP

2008-12-18 Thread Martin Silvero
[peap] TLS 1.0 Alert [length 0002], fatal unknown_ca TLS Alert read:fatal:unknown CA TLS_accept:failed in SSLv3 read client certificate A But your problem has nothing to do with the user. You haven't imported the ca certificate onto the users machine. At least not the correct one. but, if I

Re: Conf PEAP

2008-12-18 Thread A . L . M . Buxey
Hi, but, if I want the user´s don´t use certificates and only use user pass whit PEAP ¿is posible? - and how, exactly, does the EAP tunnel get set up if you dont have a common certificate to enable such a construct? you've got to have a CA - and, if done properly, you've got to have the

Re: Conf PEAP

2008-12-18 Thread Martin Silvero
- and how, exactly, does the EAP tunnel get set up if you dont have a common certificate to enable such a construct? you've got to have a CA - and, if done properly, you've got to have the validate check as well! Suppose a person who comes from outside the company, and wants to connect

RE: Conf PEAP

2008-12-18 Thread Danner, Mearl
Subject: Re: Conf PEAP - and how, exactly, does the EAP tunnel get set up if you dont have a common certificate to enable such a construct? you've got to have a CA - and, if done properly, you've got to have the validate check as well! Suppose a person who comes from outside the company

Re: Conf PEAP

2008-12-18 Thread tnt
- and how, exactly, does the EAP tunnel get set up if you dont have a common certificate to enable such a construct? you've got to have a CA - and, if done properly, you've got to have the validate check as well! Suppose a person who comes from outside the company, and wants to connect to my

Conf PEAP

2008-12-17 Thread Martin Silvero
Hello gentlemen I am configuring PEAP and there is not much information about it, Should I add a user in the user file alone? If default is configured with EAP, what should I modify another file? thanks. logout: rad_recv: Access-Request packet from host 10.10.1.21 port 1645, id=220,

Re: Conf PEAP

2008-12-17 Thread tnt
I am configuring PEAP and there is not much information about it, Maily because there is nothing to configure. It just works with default configuration. Should I add a user in the user file alone? That's best for testing - user entry at the top of the users file. If default is configured