On 09/05/2018 19:03, Alan Buxey wrote:
without further details I'd say you checked the 'do not prompt' for certificate..so it was connected but wont reconnect because its not happy about the CA or RADIUS cert. just ensure you've imported the CA used for the RADIUS server into the correct root authority store so that the client is happy with the server cert. you really SHOULD have all those things (CommonName filled and CA selected etc) - if doing a windows domain this is VERY easy with a GPO that can be just pushed to all Windows clients in the domain.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Yes, I have unchecked "Verify server's identity by validating the certificate" so I would have expected Windows not to worry that it was signed by Radius's own CA. I have configured CN and SubjectAltName to be the same resolvable FQDN, and the correct M$ extensions. I can't do GPO as this is an old style NT domain in Samba, but I'll give importing the CA a go just in case. I'm still confused why it would accept a certificate first time round but not subsequently but I know Windows does have idiosyncrasies.
FWIW the domain is a test server at home with one PC connected to it . Nick