I read the documentation and not too clear on how I can implement a cert that won't fail when trying to authenticate windows XP & Windows 7 clients. I can authenticate android devices using my certificate. I see there is an xpextensions file but not sure how to implement with the bootstrap script.
Winston McDowell wrote:
I read the documentation and not too clear on how I can implement a cert that won't fail when trying to authenticate windows XP & Windows 7 clients.
read raddb/certs/README. This is extensively documented.
I can authenticate android devices using my certificate. I see there is an xpextensions file but not sure how to implement with the bootstrap script.
You don't. The bootstrap script takes care of everything for you. Just edit the *.cnf files, as documented in the README. Alan DeKok.
Is there a way to get around not having to import the cert for windows clients? I'm trying to configure a public wifi that authenticates premier customers via radius. On 02/03/2014 02:41 PM, Alan DeKok wrote:
Winston McDowell wrote:
I read the documentation and not too clear on how I can implement a cert that won't fail when trying to authenticate windows XP & Windows 7 clients. read raddb/certs/README. This is extensively documented.
I can authenticate android devices using my certificate. I see there is an xpextensions file but not sure how to implement with the bootstrap script. You don't. The bootstrap script takes care of everything for you. Just edit the *.cnf files, as documented in the README.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
winston wrote:
Is there a way to get around not having to import the cert for windows clients?
Magic.
I'm trying to configure a public wifi that authenticates premier customers via radius.
<shrug> Your design is based on certain assumptions. Those assumptions might not be true. For security, Windows ships with *no* CAs for 802.1X. This is a Good Thing. The fact that it makes it hard for you is a side effect. Alan DeKok.
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
winston -
Winston McDowell