Generating a Microsoft compatible CSR for FreeRADIUS

[Sallee, Stephen (Jake)]

>http://www.lawn.gatech.edu/help/gtwpa

HOLY CRAP! I looked at your documentation (very well done BTW) But NONE of my win 7 stations have ever showed me the accept certificate prompt! NONE!  Please, please tell me how you got it to do that!  I have been searching for exactly that.

Jake Sallee
Godfather Of Bandwidth
Network Engineer

Fone: 254-295-4658
Phax: 254-295-4221



-----Original Message-----
From: freeradius-users-bounces+jake.sallee=umhb.edu at lists.freeradius.org [mailto:freeradius-users-bounces+jake.sallee=umhb.edu at lists.freeradius.org] On Behalf Of John Douglass
Sent: Friday, January 21, 2011 8:45 AM
To: FreeRadius users mailing list
Subject: Re: Generating a Microsoft compatible CSR for FreeRADIUS

I have built some WPA configuration guides as well as some troubleshooting documentation on our build out at:

http://www.lawn.gatech.edu/help/gtwpa

There is pretty much always some form of cert acceptance for most OS.

- John Douglass, Systems Engineer

Sent from my iPad

On Jan 21, 2011, at 9:33 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:

> On 21/01/11 14:10, Sallee, Stephen (Jake) wrote:
>> Has anyone gotten windows clients to work WITHOUT having to do any 
>> manual config on the clients?
>> 
> 
> Windows XP with PEAP/MS-CHAPv2 always require some manual config; specifically you need to select PEAP, de-select "automatically use my windows logon name" and (if using a cert from a non-installed CA) install the CA cert.
> 
> Windows 7 (and I think Vista) default to PEAP/MS-CHAPv2 so you can just click on the SSID and type your username/password, then "accept" the CA cert.
> 
> Sadly this wasn't backported into windows XP SP3 IIRC.
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html