Thanks, Alan! I generated brand new certificates and installed them on one Android tablet. But now I'm not sure what the expected use model is: Can I connect immediately without any credentials or do I have to provide a valid user/passwd once and it will be saved forever? When I try to connect I see the WLAN credential form again (although it looks different than before). So I have to enter some valid credential. Then it is saved. Is this the expected behavior? What is the expected message in the debug logfile saying everything is fine with the certificates? Thanks Uwe On 22.12.2019 15:47, Alan DeKok wrote:
On Dec 22, 2019, at 6:18 AM, uj2.hahn@posteo.de wrote:
In a school all devices (students laptops, mobiles, tablets) have to use username/password via Freeradius to get access to WLAN. But there are some well-defined school-owned devices (laptops, tablets) which should connect to WLAN immediately w/o any credentials. Which options do I have to realize that? MAC checks? Certificates? If the WiFi is using EAP / 802.1X, then you must use 802.1X for *all* devices.
For school-owned devices, the best way to do this is via certificates. It's (somewhat) difficult to copy the certificate to another machine. If the device is stolen, you can just revoke the certificate.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html