26 Oct
2011
26 Oct
'11
11:41 a.m.
On 26/10/11 16:14, Phil Mayers wrote:
Sorry, this is long.
tl;dr version - under Windows 7, if you import the CA certificate into the "Trusted Root Certification Authorities" hierarchy in the MMC "Certificates" snap-in, Windows 7 user- and machine-auth work just fine against an out-of-the-box FreeRADIUS 2.1.12 with only two minor changes.
It works for me.
I've also tested the "802.1x single sign-on" functionality in Windows 7. Again, with the certs in the appropriate place, this just works. The machine authenticates as itself - host/name.domain.com - and when you enter your username/password, it de-auths and re-auths as "DOM\user"