Hi Dont know if this is the correct place to ask but I have a problem. I have got freeradius working with eap/tls and can load the certs to XP laptops and connect. The problem I have is that if I log onto the laptop using a different user, no log on, I think the certs are for user and not machine. Anyone know of a fix. Ian ps I have used http://wiki.freeradius.org/WPA_HOWTO for the setup.
On 16/01/2008, Ian Begg <ian.begg@gmail.com> wrote:
Hi Dont know if this is the correct place to ask but I have a problem. I have got freeradius working with eap/tls and can load the certs to XP laptops and connect. The problem I have is that if I log onto the laptop using a different user, no log on, I think the certs are for user and not machine. Anyone know of a fix.
Ian ps I have used http://wiki.freeradius.org/WPA_HOWTO for the setup.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Try importing the Certificate to the Local Computer Certificate Store rather than the User one.. On XP, go Start -> Run, and run mmc. Then, go File -> Add/Remove Snap-In and add the "Certificates" Snap in and rather than selecting "My User Account" select "Computer Account". You should then be able to import the cert into the local computers Personal Cert store, and use it on whatever login you want. I've not trying this for WPA Auth, but it's worked for a similar application. Rupes
Hi all, In message <518564410801160356r2732a882red50b53a378a3543@mail.gmail.com>, Rupert Finnigan <rupert.finnigan@googlemail.com> writes
Try importing the Certificate to the Local Computer Certificate Store rather than the User one..
On XP, go Start -> Run, and run mmc. Then, go File -> Add/Remove Snap-In and add the "Certificates" Snap in and rather than selecting "My User Account" select "Computer Account". You should then be able to import the cert into the local computers Personal Cert store, and use it on whatever login you want.
That's most of the job done. You may also need to go into HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global and set AuthMode to 2 (this is a REG_SZ). For documentation on this see http://support.microsoft.com/kb/309448 (the hotfix mentioned is long since obsolete - the fix is in Windows XP SP1 and later). Best wishes, David -- David Wood david@wood2.org.uk
participants (3)
-
David Wood -
Ian Begg -
Rupert Finnigan