PEAP with Machine auth
p.mayers at imperial.ac.uk
Wed Oct 26 17:41:18 CEST 2011
On 26/10/11 16:14, Phil Mayers wrote:
> Sorry, this is long.
> tl;dr version - under Windows 7, if you import the CA certificate into
> the "Trusted Root Certification Authorities" hierarchy in the MMC
> "Certificates" snap-in, Windows 7 user- and machine-auth work just fine
> against an out-of-the-box FreeRADIUS 2.1.12 with only two minor changes.
> It works for me.
I've also tested the "802.1x single sign-on" functionality in Windows 7.
Again, with the certs in the appropriate place, this just works. The
machine authenticates as itself - host/name.domain.com - and when you
enter your username/password, it de-auths and re-auths as "DOM\user"
More information about the Freeradius-Users