Radius says client is unknown.

[A.L.M.Buxey at lboro.ac.uk]

Hi,
> I used CA.all script to create certificates and ran it as root. I also run radiusd as root. 

you may 'run it as root' but radiusd will then change to run as the user
defined in the radiusd.conf file - which MUST be able to read the config
files and SSL keys etc.

alan

> Oh, by the way, may be this is a little off-topic but can I authenticate windows xp users through peap without using a certificate?

you COULD decide not to trust or check any certificate. nasty though.

alan