Certificate validation checkbox - windows 7 wired

Morris, Andi amorris at cardiffmet.ac.uk
Tue Jul 24 17:47:03 CEST 2012


Hi all,

I'm getting an odd problem where even when my clients are configured not to validate the server certificate (test environment at the mo) on their wired connections they are failing to authenticate on one freeradius server but getting access-accept on another.



Debug output shows the familiar:

WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
WARNING: !! EAP session for state 0xbec39c4bbac58529 did not finish!
WARNING: !! Please read http://wiki.freeradius.org/Certificate_Compatibility
WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!



I accept that it's very likely I've messed something up with install of the secondary server, and am planning to wipe it and start again tomorrow and THEN introduce the production certificates, but I'm confused as to why this certificate compatibility issue would even be mentioned in the debug if my client is set to validate any server.



The odd thing is that my wireless clients are authenticating fine through this server, also set to not validate the server.



Can anybody shed any light please?



Cheers,

Andi

________________________________

>From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120724/795dbea0/attachment.html>


More information about the Freeradius-Users mailing list