do i need to change files in /etc/radda/certs if i put it into production
On Fri, Jun 18, 2010 at 10:02 AM, Spacelee <fjctlzy@gmail.com> wrote:
howto ?, is there any examples?
Try http://deployingradius.com/documents/configuration/certificates.html -- Fajar
it says : You need to edit client.cnf only if you are using EAP-TLS. If not, then that file can be left as-is. how can i know whether i use eap-tls?, i just follow the article: http://www.howtoforge.com/authentication-authorization-and-accounting-with-f... 2010/6/18 Fajar A. Nugraha <fajar@fajar.net>
On Fri, Jun 18, 2010 at 10:02 AM, Spacelee <fjctlzy@gmail.com> wrote:
howto ?, is there any examples?
Try http://deployingradius.com/documents/configuration/certificates.html
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
On Fri, Jun 18, 2010 at 10:27 AM, Spacelee <fjctlzy@gmail.com> wrote:
it says : You need to edit client.cnf only if you are using EAP-TLS. If not, then that file can be left as-is.
how can i know whether i use eap-tls?
Do you create a certificate for each client? If not, then you're not using EAP-TLS. Also note that the article you use is somewhat outdated. For example, RHEL/Centos has now maintain their own freeradius2 rpm, so no need to build your own. -- Fajar
i haven't created for each client...so will it be unsecure? 2010/6/18 Fajar A. Nugraha <fajar@fajar.net>
On Fri, Jun 18, 2010 at 10:27 AM, Spacelee <fjctlzy@gmail.com> wrote:
it says : You need to edit client.cnf only if you are using EAP-TLS. If not, then that file can be left as-is.
how can i know whether i use eap-tls?
Do you create a certificate for each client? If not, then you're not using EAP-TLS. Also note that the article you use is somewhat outdated. For example, RHEL/Centos has now maintain their own freeradius2 rpm, so no need to build your own.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
my pptp is on serverA, freeradius is on serverB howto guarantee the security of messages between pptp and radius 2010/6/18 Spacelee <fjctlzy@gmail.com>
i haven't created for each client...so will it be unsecure?
2010/6/18 Fajar A. Nugraha <fajar@fajar.net>
On Fri, Jun 18, 2010 at 10:27 AM, Spacelee <fjctlzy@gmail.com> wrote:
it says : You need to edit client.cnf only if you are using EAP-TLS. If not, then that file can be left as-is.
how can i know whether i use eap-tls?
Do you create a certificate for each client? If not, then you're not using EAP-TLS. Also note that the article you use is somewhat outdated. For example, RHEL/Centos has now maintain their own freeradius2 rpm, so no need to build your own.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Spacelee
-- Spacelee
participants (2)
-
Fajar A. Nugraha -
Spacelee