Re: No EAP/TLS with XP SP3 since End December

2011-01-05 Thread Alexandros Gougousoudis
Alexandros Gougousoudis schrieb: (after I went into the xmas holidays) the Radius-Auth stopped working. I changed nothing at the Freeradius-Server. I suspect an MS-Update, major-security updates are rolled out automatically here. But I don't know which one. Thanks for all replies. It turned

RE: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Andrew Paternoster
To: FreeRadius users mailing list Subject: Re: No EAP/TLS with XP SP3 since End December Hi JDL, that's a good point, I didn't think about that. But it's not my problem, I have 4096 keylength. It should be ok. thx Alex JDL schrieb: > December. My understanding was tha

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi JDL, that's a good point, I didn't think about that. But it's not my problem, I have 4096 keylength. It should be ok. thx Alex JDL schrieb: December. My understanding was that this was only to affect new certificates, however, since certificates are involved in the EAP process, you may

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread JDL
On Jan 3, 2011, at 4:40 AM, Alexandros Gougousoudis wrote: > I think since end December (after I went into the xmas holidays) the > Radius-Auth stopped working. First, I know almost nothing regarding EAP. However, I wanted to mention that many of the root certificates have been updated to 2048

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi Phil, Phil Mayers schrieb: To be clear, all windows clients fail? But other clients succeed? Exactly, Ubuntu can authenticate, all XP not. It is possible a windows update has removed the intermediate certificate from the client(s). IIRC Microsoft have done this in the past, expecting the i

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Phil Mayers
On 01/03/2011 11:09 AM, Alexandros Gougousoudis wrote: Alan DeKok schrieb: See if your certificate has expired. Nope, that was the first I've checked. Server and client-cert are still valid. It seems, that no XP client (even some old SP2 clients) can logon anymore, Ubuntu can. Is there so

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Alan DeKok schrieb: See if your certificate has expired. Nope, that was the first I've checked. Server and client-cert are still valid. It seems, that no XP client (even some old SP2 clients) can logon anymore, Ubuntu can. Is there some possibility to force a "Login OK" as a Default-A

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Phil Mayers
On 01/03/2011 09:40 AM, Alexandros Gougousoudis wrote: Hi, I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 That's really old. Upgrade. with EAP/TLS on an Ethernet-Port. I use Linksys switches as authenticators. I think since end December (after I went into the xmas holid

Re: No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alan DeKok
Alexandros Gougousoudis wrote: > I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 > with EAP/TLS on an Ethernet-Port. I use Linksys switches as > authenticators. I think since end December (after I went into the xmas > holidays) the Radius-Auth stopped working. I changed nothing

No EAP/TLS with XP SP3 since End December

2011-01-03 Thread Alexandros Gougousoudis
Hi, I had a working FreeRadius 1.1.6 installation and running XP Pro SP3 with EAP/TLS on an Ethernet-Port. I use Linksys switches as authenticators. I think since end December (after I went into the xmas holidays) the Radius-Auth stopped working. I changed nothing at the Freeradius-Server. I

Re: No EAP-TLS with XP SP3 ?

2009-01-16 Thread Alexandros Gougousoudis
Hi Alan, a.l.m.bu...@lboro.ac.uk schrieb: if you had a working 1.1.0 system then you could upgrade quickly to 1.1.7 - same config etc etc - and then spend 'offline-time' getting I thought it's working, but it isn't. I upgraded to 1.1.6 from 1.1.0, same setup, but XP SP3 doesn't authenticate

Re: No EAP-TLS with XP SP3 ?

2009-01-13 Thread Alexandros Gougousoudis
Hi solved it. Must be a bug in 1.1.7. I used 1.1.6 and all works fine (inkl. XP SP3). cu Alex - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: No EAP-TLS with XP SP3 ?

2009-01-13 Thread Alexandros Gougousoudis
Hi, I tried to compile the 1.1.7 OpenSUSE 10.1. But I get the following error at the end: Processing files: freeradius-dialupadmin-1.1.7-0.suse1010 Processing files: freeradius-devel-1.1.7-0.suse1010 Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/freeradius-1.1.7-build er

Re: No EAP-TLS with XP SP3 ?

2009-01-12 Thread tnt
Can you post the debug of the *same* client certificate being accepted from the SP2 machine and rejected from SP3. Ivan Kalik Kalik Informatika ISP Dana 12/1/2009, "Alexandros Gougousoudis" piše: >Hi, > >I have a lot of problems doing an EAP-TLS authentification with >Freeradius 2.1.3. We're d

Re: No EAP-TLS with XP SP3 ?

2009-01-12 Thread A . L . M . Buxey
Hi, > With XP SP3 the auth failed, I googled that FR 1.1.0 is not capable to > do this, because SP3 is realizing the same 802.1x engine as Vista does. > So I upgraded to 2.1.3 and compiled it on OpenSuse 10.1 without errors > and the software runs without problems. But the auth still doesn't

No EAP-TLS with XP SP3 ?

2009-01-12 Thread Alexandros Gougousoudis
Hi, I have a lot of problems doing an EAP-TLS authentification with Freeradius 2.1.3. We're doing a machine-based authentification with certs, using EAP-TLS with 802.1x capable Linksys switches (cable based). We had NO problems at all with Freeradius 1.1.0 and Windows 2000 SP4 and XP SP2 and