HOWTO PEAP + FreeRadius + XP Client

George KNIGHT georgeknight at gmail.com
Thu May 1 21:17:21 CEST 2008


Alan,
The permission problem has been solved as I mentioned at my earlier email.
Now, as a last step,   I'm installing the certificates. I created the
certificates by following the README file under /etc/raddb/certs/ folder.
Now I have the following certificates;

ca.der
ca.key
ca.pem
client.crt
client.csr
client.key
client.p12
client.pem
server.crt
server.csr
server.key
server.p12
server.pem

I used ca.der and client.p12 to be installed to Windows XP SP2 client. I
followed the instructions at the http://freeradius.org/doc/EAPTLS.pdf. But
at the end of the installation, where the client certificate installation is
tested at page 16, I have a different Windows message; it says " Windows
does not have enough information to verify this certificate". I followed all
the instructions there without any problem. Am I missing anything?

Are those the right certificates that copied to the Windows machine? Why are
there so many certificates created and we are just using 2?

Thank you

George Knight

On Thu, May 1, 2008 at 1:29 PM, Alan DeKok <aland at deployingradius.com>
wrote:

> George KNIGHT wrote:
> > Permissions are as follow;
> > ..
> > comp-010:/etc/raddb # dir
>
>   Uh... which OS are you using?
>
>  In any case, this is an OS issue.  FreeRADIUS & OpenSSL use the normal
> OS API's to access files.  If the server gets a "permission denied"
> error, it's because the OS is denying permission.
>
>  So... the OS needs to be fixed.  I have no idea how to do that.
>
>  Maybe you're running some "security" feature that blocks access to
> files.  e.g. AppArmor, SELinux, etc.  Go see your OS documentation for
> details.
>
>  i.e. Sorry, this isn't a FreeRADIUS problem.
>
>  Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080501/967ed416/attachment.html>


More information about the Freeradius-Users mailing list