Re: [ Re: eap-ttls failing]

2009-01-29 Thread tnt
It's fine. Send it direct. Ivan Kalik Kalik Informatika ISP Dana 28/1/2009, "Josh Hiner" piše: >t...@kalik.net wrote: >>> list. I would think that what I am doing is fairly popular? Why are more >>> people not complaining? This is too bad and if true, very poor. >>> >>> >> >> Can you post the

Re: [ Re: eap-ttls failing]

2009-01-28 Thread Josh Hiner
t...@kalik.net wrote: list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor. Can you post the eapol.log and wzctrace.log for the same attempt. I'll dig through that and see if I can find what is going on. I

Re: [ Re: eap-ttls failing]

2009-01-28 Thread Craig White
On Wed, 2009-01-28 at 09:27 +0100, Alan DeKok wrote: > Craig White wrote: > > I was complaining about it a few weeks ago (all my systems have been > > upgraded to SP3) and I was made to feel that it was just me. > > The first reporter of an issue often gets told "it works for everyone > else..."

Re: [ Re: eap-ttls failing]

2009-01-28 Thread tnt
>list. I would think that what I am doing is fairly popular? Why are more >people not complaining? This is too bad and if true, very poor. > Can you post the eapol.log and wzctrace.log for the same attempt. I'll dig through that and see if I can find what is going on. Ivan Kalik Kalik Informatika

Re: [ Re: eap-ttls failing]

2009-01-28 Thread Alan DeKok
Craig White wrote: > I was complaining about it a few weeks ago (all my systems have been > upgraded to SP3) and I was made to feel that it was just me. The first reporter of an issue often gets told "it works for everyone else..." If this is a wide-spread problem with XP SP3, then we'll have

Re: [ Re: eap-ttls failing]

2009-01-27 Thread Craig White
On Tue, 2009-01-27 at 21:08 -0500, Josh Hiner wrote: > On Tue, 2009-01-27 at 23:05 +0100, t...@kalik.net wrote: > > >Yes the cert is there, does report the correct oid etc.. etc.. Attached > > >is the client certificate I am using. I even went into the configuration > > >and made it so XP asks me t

Re: [ Re: eap-ttls failing]

2009-01-27 Thread Josh Hiner
On Tue, 2009-01-27 at 23:05 +0100, t...@kalik.net wrote: > >Yes the cert is there, does report the correct oid etc.. etc.. Attached > >is the client certificate I am using. I even went into the configuration > >and made it so XP asks me to select my certificate manually. I select > >the certificate

Re: [ Re: eap-ttls failing]

2009-01-27 Thread tnt
>Yes the cert is there, does report the correct oid etc.. etc.. Attached >is the client certificate I am using. I even went into the configuration >and made it so XP asks me to select my certificate manually. I select >the certificate manually and it still gives the same error as above >(Error in R

Re: [ Re: eap-ttls failing]

2009-01-27 Thread Josh Hiner
t...@kalik.net wrote: Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid. But "windows was unable to find a cer

Re: [ Re: eap-ttls failing]

2009-01-27 Thread tnt
>>> Ok, made new client cert and now it shows valid and displays "Provides >>> your identity to a remote Computer" as the intended purpose and on the >>> Details tab displays the correct info etc... The Certification Path >>> displays valid. But "windows was unable to find a certificate to log yo

Re: [ Re: eap-ttls failing]

2009-01-27 Thread Josh Hiner
t...@kalik.net wrote: Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid. Still same problem though (exact same problem) of

[ Re: eap-ttls failing]

2009-01-27 Thread tnt
>Ok, made new client cert and now it shows valid and displays "Provides >your identity to a remote Computer" as the intended purpose and on the >Details tab displays the correct info etc... The Certification Path >displays valid. Still same problem though (exact same problem) of just >sitting there

[ Re: eap-ttls failing]

2009-01-27 Thread Josh Hiner
Original Message Subject:Re: eap-ttls failing Date: Tue, 27 Jan 2009 11:58:54 -0500 From: Josh Hiner To: Josh Hiner References: <497f230b.1050...@remc1.org> <497f237c.7020...@remc1.org> Josh Hiner wrote: Josh Hiner wrote: t...@kalik.net w

Re: eap-ttls failing

2009-01-27 Thread tnt
>I did find the Makefile. Thanks! I tried to do a make caclient.pem but >it threw this error: > >openssl req -new -out caclient.csr -keyout caclient.key -config >../client.cnf >Generating a 2048 bit RSA private key >+++ >+++ >writing new private key to 'caclient.key' >- >op

Re: eap-ttls failing

2009-01-27 Thread Josh Hiner
Josh Hiner wrote: t...@kalik.net wrote: Whoops, I thought I solved this but I didnt. I tried setting up eap-tls on a few different laptops each using windows xp to configure eap-tls (not the wireless card client). I get the same results there. I have nothing in my /etc/raddb/users file. I tried

Re: eap-ttls failing

2009-01-27 Thread Josh Hiner
t...@kalik.net wrote: Whoops, I thought I solved this but I didnt. I tried setting up eap-tls on a few different laptops each using windows xp to configure eap-tls (not the wireless card client). I get the same results there. I have nothing in my /etc/raddb/users file. I tried putting: josh Auth-

Re: eap-ttls failing

2009-01-27 Thread tnt
>Whoops, I thought I solved this but I didnt. I tried setting up eap-tls >on a few different laptops each using windows xp to configure eap-tls >(not the wireless card client). I get the same results there. I have >nothing in my /etc/raddb/users file. I tried putting: >josh Auth-Type := eap >Au

Re: eap-ttls failing

2009-01-27 Thread Josh Hiner
Josh Hiner wrote: I have a Ruckus ZoneDirector 1025 with waps that I just installed. Testing out different EAP types I can use. I am using FreeRadius 2.1.3. I have eap-ttls and eap-peapv0 working perfectly (I am using windows to control the wireless card for peap and it works great). Was going to

Re: eap-ttls failing

2009-01-26 Thread Josh Hiner
t...@kalik.net wrote: Oh, and to add, the certificate does have this: Client Authentication purpose is 1.3.6.1.5.5.7.3.2 enabled (verified). Just wanted to clarify that I did read the FreeRadius Wiki FAQ. thanks -Josh Server is happy, supplicant isn't. Enable tracing and read the eapol.l

Re: eap-ttls failing

2009-01-26 Thread tnt
> >Oh, and to add, the certificate does have this: Client Authentication >purpose is 1.3.6.1.5.5.7.3.2 enabled (verified). Just wanted to clarify >that I did read the FreeRadius Wiki FAQ. > >thanks -Josh > Server is happy, supplicant isn't. Enable tracing and read the eapol.log: http://support.mi

Re: eap-ttls failing

2009-01-26 Thread Josh Hiner
Josh Hiner wrote: t...@kalik.net wrote: I have a Ruckus ZoneDirector 1025 with waps that I just installed. Testing out different EAP types I can use. I am using FreeRadius 2.1.3. I have eap-ttls and eap-peapv0 working perfectly (I am using windows to control the wireless card for peap and it w

Re: eap-ttls failing

2009-01-26 Thread Josh Hiner
t...@kalik.net wrote: I have a Ruckus ZoneDirector 1025 with waps that I just installed. Testing out different EAP types I can use. I am using FreeRadius 2.1.3. I have eap-ttls and eap-peapv0 working perfectly (I am using windows to control the wireless card for peap and it works great). Was go

Re: eap-ttls failing

2009-01-23 Thread tnt
>I have a Ruckus ZoneDirector 1025 with waps that I just installed. >Testing out different EAP types I can use. I am using FreeRadius 2.1.3. >I have eap-ttls and eap-peapv0 working perfectly (I am using windows to >control the wireless card for peap and it works great). Was going to try >eap-tls by

eap-ttls failing

2009-01-23 Thread Josh Hiner
I have a Ruckus ZoneDirector 1025 with waps that I just installed. Testing out different EAP types I can use. I am using FreeRadius 2.1.3. I have eap-ttls and eap-peapv0 working perfectly (I am using windows to control the wireless card for peap and it works great). Was going to try eap-tls by