i want to authenticate windows 7 computers with tls certificates.
the certs have the special windows OIDs, but i still get the error from below.
is there maybe any difference with windows 7? has anyone done this or a hint whats going wrong?
rad_recv: Access-Request packet from host 172.16.64.240 port 1645, id=133, length=153
User-Name = "host/cb-nb"
Service-Type = Framed-User
Framed-MTU = 1500
Called-Station-Id = "00-12-01-1B-2A-40"
Calling-Station-Id = "00-24-7E-6B-E4-BE"
EAP-Message = 0x0202000f01686f73742f63622d6e62
Message-Authenticator = 0xdfa853b693abac5cede3b893dac561ba
NAS-Port-Type = Ethernet
NAS-Port = 50217
NAS-Port-Id = "FastEthernet2/17"
NAS-IP-Address = 172.16.64.240
# Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
+- entering group authorize {...}
[eap] EAP packet type response id 2 length 15
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
Found Auth-Type = EAP
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Requiring client certificate
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 133 to 172.16.64.240 port 1645
EAP-Message = 0x010300060d20
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xebeac82aebe9c52b6c542d897c25837b
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 0 ID 133 with timestamp +15
WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
WARNING: !! EAP session for state 0xebeac82aebe9c52b did not finish!
WARNING: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Ready to process requests.