Re: Problem with EAP/TLS and XP SP2

2005-11-15 Thread Axel F
Look at this Thread: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg00284.html I think that's the same problem. Axel - Original Message - Radius Server: Freeradius 1.0.5 on Solaris 8 (Sparc) Client:Windows XP (SP2), Intel PRO/Wireless 2915 (a/b/g) Access

Re: Problem with EAP/TLS and XP SP2

2005-11-10 Thread mahesh luhar
- Original Message - From: Hal Pomeranz [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Problem with EAP/TLS and XP SP2 Date: Wed, 2 Nov 2005 21:22:55 -0800 Radius Server: Freeradius 1.0.5 on Solaris 8 (Sparc) Client:Windows XP (SP2), Intel PRO/Wireless

Re: Problem with EAP/TLS and XP SP2

2005-11-08 Thread Ben Walding
On 11/8/05, Michael Griego [EMAIL PROTECTED] wrote: Ben Walding wrote: We've found in testing that the XP supplicant (with certain patches) will read the certificate and send a User-Name that is constructed from the certificate CN (host/ + cert CN); thus rendering the whole checking the CN

Re: Problem with EAP/TLS and XP SP2

2005-11-07 Thread Michael Griego
Ben Walding wrote: We've found in testing that the XP supplicant (with certain patches) will read the certificate and send a User-Name that is constructed from the certificate CN (host/ + cert CN); thus rendering the whole checking the CN process fairly pointless for XP supplicants. This

Re: Problem with EAP/TLS and XP SP2

2005-11-06 Thread Ben Walding
On 11/6/05, Alan DeKok [EMAIL PROTECTED] wrote: Hal Pomeranz [EMAIL PROTECTED] wrote:I don't fully understand from the docs what this parameter is doing exactly.Is this supposed to work?Is there some configuration (perhaps in my users file) that I'm missing?What is the impact of NOT setting this

Re: Problem with EAP/TLS and XP SP2

2005-11-05 Thread Alan DeKok
Hal Pomeranz [EMAIL PROTECTED] wrote: I will note however that if I try to set: check_cert_cn = %{User-Name} in the tls section of eap.conf, then I am unable to connect to the network with EAP/TLS. See debug mode for why. I don't fully understand from the docs what this

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Hal Pomeranz
Is there anybody on the mailing list who has Freeradius working as an EAP/TLS authentication server for Windows XP SP2 supplicants? What procedure did you use for creating and installing the server and client certs? -- Hal Pomeranz, Founder/CEO Deer Run Associates [EMAIL PROTECTED]

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Alan DeKok
Hal Pomeranz [EMAIL PROTECTED] wrote: Is there anybody on the mailing list who has Freeradius working as an EAP/TLS authentication server for Windows XP SP2 supplicants? Yes. What procedure did you use for creating and installing the server and client certs? See

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Hal Pomeranz
See the scripts directory that comes with FreeRADIUS. There's a CA.certs script which tries to create sample certificates. It turns out that this was the pointer I needed. Note that the CA.certs script is a little broken, but it's broken in obvious ways that are easily fixed. A fixed version

Problem with EAP/TLS and XP SP2

2005-11-02 Thread Hal Pomeranz
Radius Server: Freeradius 1.0.5 on Solaris 8 (Sparc) Client:Windows XP (SP2), Intel PRO/Wireless 2915 (a/b/g) Access Point: DLink DI-784 I'm having trouble getting my laptop (running Windows XP SP2) to authenticate to my access point using EAP/TLS. XP shows the wireless interface hung