Thanks, yoy're rigth. I'ill continue this way, the problem is not the "effort", but I was trying to complete the picture Freeradius+MySql+EAP_TLS+Cisco AP without success.<div>Keep trying...</div><div><br>
<br><div class="gmail_quote">On Tue, Sep 14, 2010 at 5:25 AM, Alan Buxey <span dir="ltr"><<a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">Hi,<br>
<br>
> IŽll like to know if there is a way to configurates a Radius server + Mysql to authenticate Wireless clients via a Cisco AP without certificates (EAP TLS), only a username and password<br>
<br>
</div>err, EAP needs certs..thats a fundamental building block. the RADIUS server needs to be signed by a CA<br>
and the client needs to have that CA installed onto it. you can make things easier by getting your RADIUS<br>
server signed by a CA that is built into most of your clients - eg get a thawte or verisign signed cert.<br>
<br>
its a BAD BAD thing not to enable radius server checking and CA checking on your client..... the<br>
public key infrastructure is a major part of the security of 802.1X and if you thinks its 'too much effort'<br>
then I'll show you a nasty man-in-middle fake AP and radius server that will get all your users usernames<br>
and passwords. all run in a 512Mb VM on a basic laptop :-(<br>
<font color="#888888"><br>
<br>
alan<br>
</font><div><div></div><div class="h5">-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse"><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px">
<b><span style="font-size:small"><font color="#666666">Esteban Talavera</font></span></b><font color="#666666"><span style="font-size:small"></span></font></p><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px">
<b><span style="font-size:small"><font color="#666666"><br></font></span></b></p><p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><b><span style="font-size:small"><font color="#666666"><font face="'arial narrow', sans-serif"><i>Proyectos ITW</i></font></font></span></b></p>
<p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span lang="ES"><font color="#666666"><span style="font-size:x-small">Tel. </span></font></span><span style="white-space:pre"><font color="#666666"><span style="font-size:x-small"> </span></font></span><font color="#666666"><span style="font-size:x-small">+(58)212 7623035</span></font></p>
<p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span style="white-space:pre"><font color="#666666"><span style="font-size:x-small"> </span></font></span><font color="#666666"><span style="font-size:x-small">+(58)212 7620504</span></font></p>
<p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><font color="#666666"><span style="font-size:x-small">Cel.</span></font><span style="white-space:pre"><font color="#666666"><span style="font-size:x-small"> </span></font></span><font color="#666666"><span style="font-size:x-small">+(58)412 2892006</span></font></p>
<p style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><font color="#666666"><span style="font-size:x-small">Fax </span></font><span style="white-space:pre"><font color="#666666"><span style="font-size:x-small"> </span></font></span><font color="#666666"><span style="font-size:x-small">+(58)212 7615965</span></font></p>
</span><br>
</div>