Thank you Alan! I made a comment bellow. Em sex., 1 de jul. de 2022 às 11:08, Alan DeKok <aland@deployingradius.com> escreveu:
On Jul 1, 2022, at 9:55 AM, Thiago Martins via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I have a freeradius with Google LDAP and it works fine on Windows 11 and Chromebooks, but clients in Windows 10 and Windows 8 can't login to the network. It just says "You can't connect to this network". I tried a lot of different stuff on the Windows side but it didn't work at all.
The issue of "Windows starts EAP and goes away" is almost always a TLS issue.
* the CA used by FreeRADIUS isn't configured on the Windows side
So do I have to generate any kind of certificate on my server and install it on my windows 10 machines? Sorry for my noob question.
* the contents of the certs presented by FreeRADIUS aren't liked by Windows * i.e. it doesn't like the digests, auth methods, etc.
I adjusted my tls_min_version to 1.0 and tls_max_version to 1.2 and commented disable_tlsv1_1 and disable_tlsv1 on my eap config file on my server, but with no effect. Did you have a similar problem before?
Many, many, times.
It's an issue negotiating TLS, and Windows "helpfully" doesn't give you any useful information.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Atenciosamente; Thiago Martins Gerente de TI thiagomartins@itaueira.com +55 (85) 4008-9100 | +55 (85) 99697-5143 | ramal | ext 9107 -- www.itaueira.com <http://www.google.com/url?q=http%3A%2F%2Fwww.itaueira.com.br&sa=D&sntz=1&usg=AFQjCNH42Xq5lpseB4cAh2qH7npCQfuT4A> facebook/melaoRei <https://www.google.com/url?q=https%3A%2F%2Fwww.facebook.com%2Fmelaorei%2F&sa=D&sntz=1&usg=AFQjCNHpoNbpLy4hPWrbONSyBkPJZ3Da5A> f/ItaueiraTurmadaMonica <https://www.google.com/url?q=https%3A%2F%2Fwww.facebook.com%2FItaueiraTurmadaMonica&sa=D&sntz=1&usg=AFQjCNEiygBAltzyxrySohIxySxT03oNLg> f/ItaueiraMelon <https://www.google.com/url?q=https%3A%2F%2Fwww.facebook.com%2Fitaueiramelon&sa=D&sntz=1&usg=AFQjCNH2YLsM-RqYfRFrgBkzTErDSOGaeg> Esta mensagem é endereçada exclusivamente ao seu destinatário e poderá conter informações confidenciais. O uso não autorizado de tais informações é proibido e estará sujeito às penalidades cabíveis. *This message is intended exclusively for its addressee and may contain information that is confidential. * *Unauthorized use of such information is prohibited and subject to applicable penalties.*