<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div>Ok,<br><br>does someone find normal that EAP-TLS authentication works and not EAP-PEAP?<br>- it is sure, it is not a question of certificate. Alan said someday that that NAS is broken. He might be true, but maybe i missed something in the configuration, but where?<br><br>- it reminds me a question and i don't know how to answer:<br><br>I called a SSID "TLS" where security is "WPA Enterprise". it expet users to be authenticated via FREERADIUS to be allowed on the network.<br>so i use a certificate, and the commonname of this certificate is "testuser01". authentication success cause certificate is valid, but i have no user called "testuser01" on user file, sql database, or AD.<br><br>so my first question is: doing EAP-TLS authentication, user is based_what? i mean, does user have to
exist on a base like sql, ldap or a file, or just the certificate credentials are enough?<br><br>second: using RADIUS for authetication in a LAN means that 802.1x is used. That's what i read. Right now, i notice that 802.1x is off on all my NAS... <img src="http://mail.yimg.com/us.yimg.com/i/mesg/tsmileys2/19.gif"> i forgot to set it "ON".<br>so why does EAP-TLS Authentication runs OK... why that? (and EAP-PEAP still not ??)<br><br><br>- Yes, i know it's not school here but realize that it's not easy to surround alone. thank your for your explanation and your time!<br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;">----- Message d'origine ----<br>De : Ivan Kalik <tnt@kalik.net><br>À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Envoyé le : Vendredi, 18 Juillet 2008, 20h00mn 31s<br>Objet : Re:
Re : EAP-TLS OK - EAP-PEAP KO!! why that?<br><br>> Module: Instantiating eap-mschapv2<br>> mschapv2 {<br>> with_ntdomain_hack = no //i set "yes in /etc/raddb/module/mschap for this <br>> but still stay on "no"<br>> }<br><br>Because this is from eap.conf.<br><br>Ivan Kalik<br>Kalik Informatika ISP<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></div></div></div><br>
<hr size="1">
Envoyé avec <a href="http://us.rd.yahoo.com/mailuk/taglines/isp/control/*http://us.rd.yahoo.com/evt=52423/*http://fr.docs.yahoo.com/mail/overview/index.html">Yahoo! Mail</a>.<br>Une boite mail plus intelligente. </a></body></html>