Hi all I have very short question I have simple configuration of one server and three clients. I am using freeradius sever to authenticate them to the server but now I am trying to make one of these clients as a proxy to the server for the others. I have changed a lot in the configuration files (e.g proxy.conf)but i don't know how to do it. Could you just tell me step by step what to do: Thank you in advance Hussein _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Hi, Can you please let me know how to configure free-radius with TTLS/MSCHAPv2 and mutual authentication? By 'mutual authentication' I refer to the following authentication process: 1. The client authenticate the server 2. The server authenticate the client 3. Only than - the clients sends username + password using MSCHAPv2 Thanks, Eyal. --------------------------------------------------------------------- Envara, Ltd. This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.
Zolotov, Eyal wrote:
By ‘mutual authentication’ I refer to the following authentication process:
1. The client authenticate the server
Give the client the CA cert used to sign the server cert.
2. The server authenticate the client
Create a client cert, signed by the server cert.
3. Only than – the clients sends username + password using MSCHAPv2
In unlang, set: update control { EAP-TLS-Require-Client-Cert = yes } This forces the server to validate the client cert, which is normally not required for TTLS. Alan DeKok.
participants (3)
-
Alan DeKok -
hussein alshatri -
Zolotov, Eyal