Re: MS-CHAP/PEAP

2004-05-26 Thread Damjan
PEAP requires a certificate for the server, but not for the clients. What are the differences between PEAP and EAP-TTLS? Which one is more secure? Which one has broader support in supplicants? Can I use both eap-ttls and peap? -- damjan | This is my jabber ID -- [EMAIL PROTECTED] -- not my

MS-CHAP/PEAP

2004-05-21 Thread Barry Stewart
Hi, I'm trying to use Freeradius to authenticate users in a wireless network. I don't wish to use certificates at all. I have read the FAQ and all the documentation I have found on this. Most of the clients will be running Windows XP. From what I've read it looks like I will need to use

Re: MS-CHAP/PEAP

2004-05-21 Thread Barry Stewart
Thanks, It makes more sense now. I'll give it a try! Bob McCormick wrote: PEAP requires a certificate for the server, but not for the clients.Freeradius comes with some scripts for generating a self signed certificate, or you can buy one from Verisign or Thawte. On May 21, 2004, at

Re: MS-CHAP/PEAP

2004-05-21 Thread Barry Stewart
I looked into the certificates a bit and I found the scripts for generating them. I can certainly create certs and I can create my own CA. However, I'm not sure this is my problem now as FR comes with sample certs and the lines in eap.conf point to these. If I change the password in

Re: MS-CHAP/PEAP

2004-05-21 Thread Barry Stewart
Thanks for the response, Bob McCormick clued me in on this. I thought this was about client certs. I have been succesfull authenticating with PEAP thanks to Kerry Hughes. I didn't have the users file configured right as I was including Auth-Type in the following line: userid