<HTML><HEAD>
<META content="text/html; charset=iso-8859-15" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16671"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV>I do not recall FR 2.11 default working with Windows so I followed the instructions from the link I posted and it started to work after that; of course I am using a LDAP back end not AD directly. I can and do authenticate Windows XP SP3 no problem against FR, but as I said it is with an LDAP back end, maybe an AD backend is a bit different.</DIV>
<DIV> </DIV>
<DIV>Good luck on it either way, you will eventually find your way there I am sure:)</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>
<DIV>Brett Littrell</DIV>
<DIV>Network Manager</DIV>
<DIV>MUSD</DIV>
<DIV>CISSP, CCSP, CCVP, MCNE</DIV><BR><BR>>>> On Tuesday, February 08, 2011 at 3:16 AM, in message <00ad01cbc781$94f25850$bed708f0$@it>, Domenico Viggiani <dviggiani@tiscali.it> wrote:<BR></DIV>
<TABLE style="MARGIN: 0px 0px 0px 15px; FONT-SIZE: 1em" border=0 bgColor=#f3f3f3>
<TBODY>
<TR>
<TD>
<DIV style="BORDER-LEFT: #050505 1px solid; PADDING-LEFT: 7px">Brett Littrell wrote:<BR>><BR>> Not sure if your just having issues with the OID or something else, <BR>> but I found the thread really helped to fix cert issues I > had. <BR><A href="http://lists.cistron.nl/pipermail/freeradius-users/2006-October/msg00515.htm">http://lists.cistron.nl/pipermail/freeradius-users/2006-October/msg00515.htm</A><BR>l <BR>> I used the MS cert server as described in this listing as well as used our<BR>Novell <BR>> Cert server and both worked for issuing a Cert that MS clients will<BR>accept. <BR>> I am sure OpenSSL can do it to just never looked far enough into it to see<BR>the exact syntax<BR><BR>Thanks but I think that recent versions of Freeradius contains a certs<BR>generation script that provide "test" certificates with all OIDs needed.<BR>Or am I wrong?<BR><BR>I'm currently still unable to authenticate a XP SP3 client to FR by Active<BR>Directory.<BR><BR>Regards<BR>--<BR>DV<BR><BR><BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></DIV></TD></TR></TBODY></TABLE></BODY></HTML>