Microsoft implements something better known as PEAP v0 see: draft-kamath-pppext-peapv0-00.txt, “Microsoft’s PEAP v0 (Implemented in Windows XP SP1) July 2002, http://www.watersprings. org/pub/id/draft-kamath-pppext-peapv0-00.txt As far as I know, no-one implements PEAP v2, and it's not clear why you would build a server for it if you don't have a client? Dave. ----Original Message---- From: aland@deployingradius.com Date: Nov 15, 2006 14:49 To: "FreeRadius users mailing list"<freeradius-users@lists.freeradius. org> Subj: Re: PEAPv2 Server "MURAT SEZGIN" <sezginmurat@hotmail.com> wrote:
I am trying to implement a PEAP version 2 (draft-josefsson-pppext-eap-tls-eap-10.txt) client. I was using "Odyssey Server Administration" server for PEAP v1 and EAP-TTLS. But the server does not support PEAP v2. Is there any other server softwares which support PEAP v2? Or is there any body who tried to test PEAP v2?
Microsoft supports PEAPv2, I think. My suggestion is to implement PEAPv2 in a server first, and to test that implementation with the Microsoft clients. Once that works, you then have a server you can use to test your client implementation. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius. org/list/users.html
"david@mitton.com" <david@mitton.com> wrote:
As far as I know, no-one implements PEAP v2, and it's not clear why you would build a server for it if you don't have a client?
I thought MS had a client implementation, but I guess I'm wrong. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
david@mitton.com wrote:
Microsoft implements something better known as PEAP v0 see: draft-kamath-pppext-peapv0-00.txt, “Microsoft’s PEAP v0 (Implemented in Windows XP SP1) July 2002, http://www.watersprings. org/pub/id/draft-kamath-pppext-peapv0-00.txt
As far as I know, no-one implements PEAP v2, and it's not clear why you would build a server for it if you don't have a client?
Vista does.
Vista supports only PEAPv2 client (but I think only one TLV type- TLV-Result), Microsoft is going to release a new version of Windows Server (Longhorn) in the second half of 2007. It will support PEAPv2. I want to know that, if there is currently any RADIUS server which supports PEAPv2. Regards, Murat
From: Phil Mayers <p.mayers@imperial.ac.uk> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: PEAPv2 Server Date: Thu, 16 Nov 2006 10:50:18 +0000
david@mitton.com wrote:
Microsoft implements something better known as PEAP v0 see: draft-kamath-pppext-peapv0-00.txt, âMicrosoftâs PEAP v0 (Implemented in Windows XP SP1) July 2002, http://www.watersprings. org/pub/id/draft-kamath-pppext-peapv0-00.txt As far as I know, no-one implements PEAP v2, and it's not clear why you would build a server for it if you don't have a client?
Vista does. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Real-time chat with your friends - Free download - MSN Messenger http://messenger.msn.com/?mkt=tr
"MURAT SEZGIN" <sezginmurat@hotmail.com> wrote:
I want to know that, if there is currently any RADIUS server which supports PEAPv2.
No open source RADIUS server supports PEAPv2. Please supply patches. :) Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
-----Original Message-----
Vista supports only PEAPv2 client (but I think only one TLV type- TLV-Result),
Can you provide some documentation on that? We've been collectively trying to figure out what Microsoft did to break Vista working with FreeRADIUS. I'm wondering if this is it.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e5b2913c-8dab-42fc-... The above link includes a document with a title of "EAPHost Extensibility in Windows Server "Longhorn" and Windows Vista" . In this document you will see a link to "Extensible Authentication Protocol (EAP) Registry" on page 2. In this link the supported EAP-TYPE numbers are written. For type number 33, which is EAP-TLV, it is only supported for "MS-Authentication-TLV", and I think this type is only Result-TLV. Regards, Murat Sezgin
From: "King, Michael" <MKing@bridgew.edu> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Subject: RE: PEAPv2 Server Date: Fri, 17 Nov 2006 16:32:29 -0500
-----Original Message-----
Vista supports only PEAPv2 client (but I think only one TLV type- TLV-Result),
Can you provide some documentation on that? We've been collectively trying to figure out what Microsoft did to break Vista working with FreeRADIUS. I'm wondering if this is it.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Real-time chat with your friends - Free download - MSN Messenger http://messenger.msn.com/?mkt=tr
The link you reference is the IANA registry of EAP method type assignments. http://www.iana.org/assignments/eap-numbers The only problem is that PEAP is method 25. EAP-TLV is something else altogther. PEAP v2 is described by an expired draft, but you can find a copy here: http://www.watersprings.org/pub/id/draft-josefsson-pppext-eap-tls-eap-10.txt Page 29 shows: Type 25 - PEAP Dave. On 11/18/2006 04:03 AM, MURAT SEZGIN wrote:
http://www.microsoft.com/downloads/details.aspx?FamilyID=e5b2913c-8dab-42fc-...
The above link includes a document with a title of "EAPHost Extensibility in Windows Server "Longhorn" and Windows Vista" . In this document you will see a link to "Extensible Authentication Protocol (EAP) Registry" on page 2. In this link the supported EAP-TYPE numbers are written. For type number 33, which is EAP-TLV, it is only supported for "MS-Authentication-TLV", and I think this type is only Result-TLV.
Regards, Murat Sezgin
From: "King, Michael" <MKing@bridgew.edu> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Subject: RE: PEAPv2 Server Date: Fri, 17 Nov 2006 16:32:29 -0500
-----Original Message-----
Vista supports only PEAPv2 client (but I think only one TLV type- TLV-Result),
Can you provide some documentation on that? We've been collectively trying to figure out what Microsoft did to break Vista working with FreeRADIUS. I'm wondering if this is it.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Real-time chat with your friends - Free download - MSN Messenger http://messenger.msn.com/?mkt=tr
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
While I'm willing to believe that Vista supports PEAP v2, You are wrong to say it ONLY support that version. That would break backwards compatibility. I have already run a Vista client with a PEAP outer method to my Win 2003 Server. I had no problems. I'm fairly aware of the EAPHost development, and while it adds many new features, it does not preclude the older. The document you quote contradicts your statement on page 2, bullet 4 · EAP method coexistence EAPHost allows multiple implementations of the same EAP method to coexist simultaneously. For example, the Microsoft version of PEAP and the Cisco Systems, Inc. version of PEAP can be installed and selected. and a paragraph later: For EAP method vendors, EAPHost provides support for EAP methods already developed for Windows Server 2003 and Windows XP and an easier method of developing new EAP methods for Windows Vista and Windows Server "Longhorn." EAPHost also allows better classification of EAP types so that the built-in 802.1X and PPP-based Windows supplicants can use them. Dave. On 11/17/2006 03:11 PM, MURAT SEZGIN wrote:
Vista supports only PEAPv2 client (but I think only one TLV type- TLV-Result), Microsoft is going to release a new version of Windows Server (Longhorn) in the second half of 2007. It will support PEAPv2.
I want to know that, if there is currently any RADIUS server which supports PEAPv2.
Regards, Murat
From: Phil Mayers <p.mayers@imperial.ac.uk> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: PEAPv2 Server Date: Thu, 16 Nov 2006 10:50:18 +0000
david@mitton.com wrote:
Microsoft implements something better known as PEAP v0 see: draft-kamath-pppext-peapv0-00.txt, âMicrosoftâs PEAP v0 (Implemented in Windows XP SP1) July 2002, http://www.watersprings. org/pub/id/draft-kamath-pppext-peapv0-00.txt As far as I know, no-one implements PEAP v2, and it's not clear why you would build a server for it if you don't have a client?
Vista does. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Real-time chat with your friends - Free download - MSN Messenger http://messenger.msn.com/?mkt=tr
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (6)
-
Alan DeKok -
David Mitton -
david＠mitton.com
-
King, Michael -
MURAT SEZGIN -
Phil Mayers