Authenticating Laptop without a Certificate Installed
When I connect a mobile phone or a tablet to my wireless network it works fine even though they don't have a certificate installed. I am checking the MAC address and putting them into a public vlan if it is not found. However when I connect a windows laptop that does not have a certificate installed it doesn't allow it. It won't connect and radius says it has an unknown CA I am using PEAP which it is my understanding would allow you to connect with a user name and password and no certificate if you told it not to validate the certificate. It is important that people be able to connect even if they don't have a certificate and I just control it based on the mac address. Thanks, Joe -- This email message and any attachments are for the sole use of the intended recipient(s) and contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message and any attachments.
On 01/24/2012 08:53 PM, McSparin, Joe wrote:
When I connect a mobile phone or a tablet to my wireless network it works fine even though they don't have a certificate installed. I am checking the MAC address and putting them into a public vlan if it is not found. However when I connect a windows laptop that does not have a certificate installed it doesn't allow it. It won't connect and radius says it has an unknown CA I am using PEAP which it is my understanding would allow you to connect with a user name and password and no certificate if you told it not to validate the certificate. It is important that people be able to connect even if they don't have a certificate and I just control it based on the mac address.
Frankly this email confused me. WHICH certificate are you talking about? There is: 1. A server cert 2. The CA cert that signs the server cert 3. Optionally (not usually) a client cert PEAP normally REQUIRES that #2 be installed on the clients.
The CA cert. Joseph R. McSparin Network Administrator Hill Country Memorial Hospital 830 990 6638 phone 830 990 6623 fax jmcsparin@hillcountrymemorial.org -----Original Message----- From: freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists.freerad ius.org [mailto:freeradius-users-bounces+jmcsparin=hillcountrymemorial.org@lists .freeradius.org] On Behalf Of Phil Mayers Sent: Tuesday, January 24, 2012 3:13 PM To: freeradius-users@lists.freeradius.org Subject: Re: Authenticating Laptop without a Certificate Installed On 01/24/2012 08:53 PM, McSparin, Joe wrote:
When I connect a mobile phone or a tablet to my wireless network it works fine even though they don't have a certificate installed. I am checking the MAC address and putting them into a public vlan if it is not found. However when I connect a windows laptop that does not have a certificate installed it doesn't allow it. It won't connect and radius says it has an unknown CA I am using PEAP which it is my understanding would allow you to connect with a user name and password and no certificate if you told it not to validate the certificate. It is important that people be able to connect even if they don't have a certificate and I just control it based on the mac address.
Frankly this email confused me. WHICH certificate are you talking about? There is: 1. A server cert 2. The CA cert that signs the server cert 3. Optionally (not usually) a client cert PEAP normally REQUIRES that #2 be installed on the clients. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- This email message and any attachments are for the sole use of the intended recipient(s) and contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message and any attachments.
At some point, once upon a time, Phil Mayers wrote:
Frankly this email confused me.
WHICH certificate are you talking about?
Ditto. On Tue, Jan 24, 2012 at 04:09:57PM -0600, McSparin, Joe wrote:
The CA cert.
Assuming you mean the CA root certificate: on Windows, untick the box that says "Validate server certificate". (Then think if this is the best way to do it, and consider installing the root certificate and ticking the box again.) Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Hi, Don't know if someone did it, but does a webmin pluggin exist for freeradius ? regards
participants (5)
-
Alan DeKok -
Matthew Newton -
McSparin, Joe -
Phil Mayers -
yzy-oui-fi