FreeRadius works, but i cant connect with WIndows!
Hey, i have freeradius running on Linux and everything works fine but one thing dont!
Wed Jun 13 11:14:04 2018 : Auth: (192) Login OK: [gast/<via Auth-Type = eap>] (from client SVG_EDV3 port 0 via TLS tunnel)
Wed Jun 13 11:14:04 2018 : Auth: (192) Login OK: [gast/<via Auth-Type = eap>] (from client SVG_EDV3 port 0 cli 3C-2E-FF-87-FC-39)
Wed Jun 13 11:25:28 2018 : Auth: (198) Login OK: [gast/<via Auth-Type = eap>] (from client SVG_EDV1 port 0 via TLS tunnel)
Wed Jun 13 11:25:28 2018 : Auth: (198) Login OK: [gast/<via Auth-Type
= eap>] (from client SVG_EDV1 port 0 cli 00-61-71-79-46-74) Wed Jun 13
11:31:11 2018 : ERROR: (203) eap_peap: ERROR: TLS Alert
read:fatal:unknown CA Wed Jun 13 11:31:11 2018 : Auth: (203) Login
incorrect (eap_peap: TLS Alert read:fatal:unknown CA):
[host/NB-Praktikant01.svg.de/<via Auth-Type = eap>] (from client
SVG_EDV1 port 0 cli 74-E5-F9-83-97-3A)
I cant conect to WLAN with my Mac or Windows, it just work with Mobile Phones ;/ What can i do?
read:fatal:unknown CA Wed Jun 13 11:31:11 2018 : Auth: (203) Login incorrect (eap_peap: TLS Alert read:fatal:unknown CA):
[host/NB-Praktikant01.svg.de/<via Auth-Type = eap>] (from client SVG_EDV1 port 0 cli 74-E5-F9-83-97-3A)
I cant conect to WLAN with my Mac or Windows, it just work with Mobile Phones ;/ What can i do?
It does not work on your mobile phones. Maybe you can *connect* with your mobile phone, but there's more to "working": Your device must be sure to send its configured username and password only to the authorised server of your organisation, not a random third-party (attacker). To that end, you have to configure on your client device *which server* from *which CA* you expect. In your phone example, you have configured none of that and while you successfully send your password to your server (and can connect), your device would just as well send the password to someone else's server (who will also connect you, but collect your password in the process). The error message above is actually a GoodThing(tm): the client tells you that it does not trust you - because of missing or incorrect certificate information. Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 2, avenue de l'Université L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
participants (2)
-
Nolden, Samuel -
Stefan Winter