Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
x27;origine De : Ivan Kalik <[EMAIL PROTECTED]> À : FreeRadius users mailing list Envoyé le : Lundi, 19 Mai 2008, 0h37mn 23s Objet : RE: Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ?? >Ok, we assume my certificates are corrects. > >So i have some more questions: >

RE: Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Ivan Kalik
>Ok, we assume my certificates are corrects. > >So i have some more questions: > > >- Certificate should be import for user accounts or for computer account ? Who/what ever is you supplicant trying to authenticate. If the supplicant can't find the correct certificate it will give up. > >- i use

Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
rte A 204, Appt 8 2 Oulfa Casablanca - Maroc Tél. : +212 69 25 85 70 - Message d'origine De : Ivan Kalik <[EMAIL PROTECTED]> À : FreeRadius users mailing list Envoyé le : Dimanche, 18 Mai 2008, 17h00mn 59s Objet : Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ?? >you can vie

Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
85 70 - Message d'origine De : Ivan Kalik <[EMAIL PROTECTED]> À : FreeRadius users mailing list Envoyé le : Dimanche, 18 Mai 2008, 17h00mn 59s Objet : Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ?? >you can view screenshots of the certificate here: > >- CA Certific

Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Ivan Kalik
>you can view screenshots of the certificate here: > >- CA Certificate that i imported on XP with DER format: >http://img357.imageshack.us/img357/2264/cacertificate1wj4.jpg > >- Client Certificate with p12 format: >http://img164.imageshack.us/img164/2894/certifclient1kf1.jpg >http://img164.imagesha

Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-18 Thread Joel MBA OYONE
t 8 >2 Oulfa >Casablanca - Maroc > >TÊl. : +212 69 25 85 70 > > >----- Message d'origine >De : Alan DeKok <[EMAIL PROTECTED]> >� : FreeRadius users mailing list >EnvoyÊ le : Lundi, 5 Mai 2008, 17h18mn 10s >Objet : Re: Re : howto EAP-TLS on freera

Re: Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-07 Thread Ivan Kalik
gt; >� : FreeRadius users mailing list > >EnvoyÊ le : Lundi, 5 Mai 2008, 17h18mn 10s >Objet : Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ?? > >Joel MBA OYONE wrote: >... >> The VLAN attributes defined in RFC3580 are as follows: >> � Tunnel-Type=VLAN (13) >>

Re : Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-07 Thread Joel MBA OYONE
ok <[EMAIL PROTECTED]> À : FreeRadius users mailing list Envoyé le : Lundi, 5 Mai 2008, 17h18mn 10s Objet : Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ?? Joel MBA OYONE wrote: ... > The VLAN attributes defined in RFC3580 are as follows: > • Tunnel-Type=VLAN (13) > • Tunnel-Med

Re : Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-07 Thread Joel MBA OYONE
ers mailing list Envoyé le : Lundi, 5 Mai 2008, 17h18mn 10s Objet : Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ?? Joel MBA OYONE wrote: ... > The VLAN attributes defined in RFC3580 are as follows: > • Tunnel-Type=VLAN (13) > • Tunnel-Medium-Type=802 > • Tunnel-Private-Gr

Re: Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-05 Thread Alan DeKok
Joel MBA OYONE wrote: ... > The VLAN attributes defined in RFC3580 are as follows: > • Tunnel-Type=VLAN (13) > • Tunnel-Medium-Type=802 > • Tunnel-Private-Group-ID=VLANID > > NOTE: The FreeRADIUS dictionary maps the 802 string value to the integer 6, > which > is why client entries

Re : howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-05 Thread Joel MBA OYONE
t certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 ++[eap] returns handled Sending Access-Challenge of id 8 to 192.168.2.4 port 1024 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "2" Reply-Message = &q

Re: howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-05 Thread Ivan Kalik
> - ca.der no prob, known as an CA in windows > - server.p12 ---no prob, certicate is valid > - client.p12 --- !!! windows said something like that >(excuse my english translation, but i think you'll get >the message): > >--CA > ---Server > ---clients: > > ---Information about the certific

Re: howto EAP-TLS on freeradius 2.0.2-3 ??

2008-05-03 Thread Ivan Kalik
There is a readme file in certs folder explaining how to make client certificates. Ivan Kalik Kalik Informatika ISP Dana 3/5/2008, "Joel MBA OYONE" <[EMAIL PROTECTED]> piše: >OK, >radiusd -X and /etc/raddb/certs/bootstrap generated some files in >/etc/raddb/certs like >ca.pem >ca.key >01.pem