<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">Thanks I can connect windows with PEAP/ MSCHAPv2 . Need to fix the certificates.<br><div> </div>==================================================<br><br>Benjamin K. Eshun<div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Mercredi, 4 Avril 2007, 23h16mn 24s<br>Objet : Re: Re : EAP/TTLS PEAP MSCHAP<br><br><div>Ian Truelsen wrote:<br>> On Wed, 2007-04-04 at 20:58 +0100, Arran Cudbard-Bell wrote:<br>> <br>>> According to the microsoft support article <br>>> (<a
target="_blank" href="http://support.microsoft.com/kb/814394/en-us">http://support.microsoft.com/kb/814394/en-us</a>)<br>>><br>>> "The IAS or the VPN server computer certificate is configured with the <br>>> Server Authentication purpose. The object identifier for Server <br>>> Authentication is 1.3.6.1.5.5.7.3.1."<br>>><br>>> But I have no idea how to add it to the certificate, if you find out <br>>> please let me know :)<br>>><br>>> <br>> Check out this article:<br>><br>> <a target="_blank" href="http://www.linuxjournal.com/article/8095">http://www.linuxjournal.com/article/8095</a><br>><br>> It explains how to get the MS attributes into the certificates.<br>><br>> Hope this helps.<br>> <br>Excellent, thanks, just what I was looking for :)<br><br>Is it really just as simple as creating the certificate, signing it with <br>the right extensions, installing the
proper rootCA on the windows <br>machines , and configuring the windows supplicant correctly ?<br><br>Which would be<br><br>In authentication tab<br>Enable IEEE 802.1x authentication for this network<br>Setting EAP Type to PEAP<br><br>In properties<br>Validate server certificate<br>Authentication method EAP-MSCHAP v2<br>Checking the Root CA the certificate was signed with .<br><br>In Configure<br>Automatically use my windows logo name and password unchecked.<br><br>Or are there more weird windows things ?<br><br>Gah... never appreciated Mac OSX so much.<br><br>"oo looks like your connecting to an 802.11x network , please enter <br>your username and password, hmm you havent chosen to explicitly trust <br>this certificate would you like to ?<br>.... Connected!"..... "and now i'm going to save your username and <br>password in the keychain so you'll never have to go through this <br>amazingly simple process ever again".<br><br>---<br>Arran<br>- <br>List
info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div><br></div></div><br>
<hr size="1">
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions !
Profitez des connaissances, des opinions et des expériences des internautes sur <a href="http://fr.rd.yahoo.com/evt=42054/*http://fr.answers.yahoo.com">Yahoo! Questions/Réponses</a>.</body></html>