Re: The last piece of the puzzle - XP host authentication

2011-04-20 Thread Phil Mayers
@lists.freeradius.org Subject: Re: The last piece of the puzzle - XP host authentication On 19/04/11 14:59, East, Bill wrote: Have you made sure that your root cert is present in the right stores - remember windows clients have both machine and per-user cert stores. Machine auth requires

Re: The last piece of the puzzle - XP host authentication

2011-04-19 Thread Phil Mayers
On 04/18/2011 08:39 PM, East, Bill wrote: Like the man says, other people are doing it so I know it's not impossible. What seems to be happening from reading the debug is that domain/user requests are coming in using EAP, doing the TLS interchange, then using MSCHAPv2 to verify the

RE: The last piece of the puzzle - XP host authentication

2011-04-19 Thread East, Bill
: The last piece of the puzzle - XP host authentication Have you made sure that your root cert is present in the right stores - remember windows clients have both machine and per-user cert stores. Machine auth requires it be in the machine store. Bah, I should have known that. It's fixed, now

Re: The last piece of the puzzle - XP host authentication

2011-04-19 Thread Phil Mayers
On 19/04/11 14:59, East, Bill wrote: Have you made sure that your root cert is present in the right stores - remember windows clients have both machine and per-user cert stores. Machine auth requires it be in the machine store. Bah, I should have known that. It's fixed, now. Cool This

RE: The last piece of the puzzle - XP host authentication

2011-04-19 Thread East, Bill
: The last piece of the puzzle - XP host authentication On 19/04/11 14:59, East, Bill wrote: Have you made sure that your root cert is present in the right stores - remember windows clients have both machine and per-user cert stores. Machine auth requires it be in the machine store. Bah, I

Re: The last piece of the puzzle - XP host authentication

2011-04-18 Thread Alan Buxey
hi, your User-Name is going from a sane value 'host/LP-0010.myorg.org' to just '/LP-0010.myorg.org' - are you playing around with hints? you dont need to remove the host/ part - in fact, messing with the User-Name will cause EAP to break...especially when a windows machine is involved. if you

RE: The last piece of the puzzle - XP host authentication

2011-04-18 Thread East, Bill
of the puzzle - XP host authentication hi, your User-Name is going from a sane value 'host/LP-0010.myorg.org' to just '/LP-0010.myorg.org' - are you playing around with hints? you dont need to remove the host/ part - in fact, messing with the User-Name will cause EAP to break