I think the problem is the Windows Supplicant because i use a "Intel PROSet Wireless" to connect with success. Need to add [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 to the PKCS#7 keybag attributes holding the client's private key. Already search in here but the two info pages I find are broken: http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm http://www.hep.phys.soton.ac.uk/~jhe/documents/WPA-Authentication+RADIUS-HOW TO.html How can I do this ? Thanks -----Original Message----- From: freeradius-users-bounces+pedrojmalves=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+pedrojmalves=gmail.com@lists.freeradius.org ] On Behalf Of Alan DeKok Sent: sexta-feira, 30 de Abril de 2010 8:58 To: FreeRadius users mailing list Subject: Re: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP Pedro Alves wrote:
Using JRadiusSimulator to test and receive "Sending Access-Accept" :)
But when i use a client AP Cisco Aironet 1121, only users from "files" can connect, users on AD dont. ... Sending Access-Challenge of id 110 to 10.1.3.17 port 1645 EAP-Message =
0x011c004a1900170301003faca645f76e5aff8c761515bd9d8c3213f7e06d164a58508ec372
6451efcaa894181735f73811912c526d93579a32e2887690f78fb267de6af44993815d126a Message-Authenticator = 0x00000000000000000000000000000000 State = 0xac9d3931ab8120751e3f7dd68458a60f Finished request 149. Going to the next request Waking up in 4.7 seconds.
See the FAQ and the comments in eap.conf in recent versions of the server. It may also be a Samba bug. See: https://bugzilla.samba.org/show_bug.cgi?id=6563 Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html