<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.3059" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>Ok, that's what I thought (about the root Certificate not being pleasing to XP).</DIV>
<DIV> </DIV>
<DIV>FYI: I'm using a version of Linux by Novell called SLES (SUSE Linux Enterprise Server) version 9 Service Pack 3 and the FreeRADIUS is from Novell's Web site (freeradius-1.0.2-0.i586.rpm, freeradius-devel-1.0.2-0.i586.rpm).</DIV>
<DIV> </DIV>
<DIV>I've done my Certificate work by using SLES' YaST, "Security and Users", "CA Management". I simply exported the root cert using this CA Management GUI. This worked great with Cisco's ADU configuration tool.</DIV>
<DIV> </DIV>
<DIV>If someone could give me the quickest and easiest way to creating a root certificate that's works with Windows XP, that would be great.</DIV>
<DIV> </DIV>
<DIV>I have another CA running on a Windows 2003 server, can I make use of this CA somehow?</DIV>
<DIV> </DIV>
<DIV>Thanks for any help.</DIV>
<DIV>Marc<BR><BR>>>> A.L.M.Buxey@lboro.ac.uk 4/25/2007 1:33:00 PM >>><BR></DIV>
<DIV style="COLOR: #000000">hi,<BR><BR>rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal access_denied<BR>TLS Alert read:fatal:access denied<BR>rlm_eap_peap: No data inside of the tunnel.<BR>rlm_eap: Handler failed in EAP/peap<BR>rlm_eap: Failed in EAP select<BR><BR>okay. so thats the main issue. were your certificates generated with<BR>the XP extensions? how have you configured the native supplicant?<BR>it doesnt need much configuring.... just disable fast-connect, disable<BR>user guest account, use machine auth (if you're not doing machine)<BR>and click the MSCHPv2 stuff and deselect the 'use windows username/password'<BR>if you cannot use those. then its up to you to ensure the cert is in the<BR>store and you verify or dont verify your radius cert. <BR><BR>alan<BR>- <BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></DIV></BODY></HTML>