XP client can not authenticate in Radius Server - HELP ME PLEASE!!!!!!!!!!!!!
Hi ALL!!!!!!!!!!!!!!!!!!!!!!! I did more then 20 openssl commands in order to issue a CA for tests... Howto in http://www.linuxjournal.com/node/8095/print and http://www.linuxjournal.com/node/8151/print. I DID ALL THE COMMANDS!!! XP client do not authenticate :-( Do I need users file??? What the correct sintaxe for login guaraldi and password mudar123? I defined users file like: guaraldi Auth-Type := EAP, Cleartext-Password == "mudar123" CA defined in OPENSSL!!! Radius server stop displaying "can not get issuer certificate" and "unknow CA" Server certificate signed!!! Client certificate defined!!! XP with cacert.pem and client_cert.p12!!!!!!!!!!!! I did not use ca.der .... XP Config with EAP to Smartcard or other certificates TLS and so on... AP with WPA/TKIP with 802.1x to 192.168.0.254 port 1812. OK!!! It works... Why XP do not authenticate with radius??? Guaraldi
Hilton Guaraldi wrote:
Hi ALL!!!!!!!!!!!!!!!!!!!!!!!
I did more then 20 openssl commands in order to issue a CA for tests... Howto in http://www.linuxjournal.com/node/8095/print and http://www.linuxjournal.com/node/8151/print. I DID ALL THE COMMANDS!!!
And you didn't use the examples that came with the server. In version 2: 1) install the server 2) run "radiusd -X' 3) EAP will work. See raddb/certs/README
XP client do not authenticate :-( Do I need users file??? What the correct sintaxe for login guaraldi and password mudar123?
See the FAQ for an example.
I defined users file like: guaraldi Auth-Type := EAP, Cleartext-Password == "mudar123"
That's wrong. See "man users" or "man 5 users" for documentation. Alan DeKok.
Hi,
Hi ALL!!!!!!!!!!!!!!!!!!!!!!!
Hi! ignore the tutorials. install latest version from source...ensure /usr/local/etc/raddb or /etc/raddb doesnt exist before 'make install' thenm run the radiusd server...the first time it will make test certs. copy the CA.der server.der to the windows system and install as trusted certificates
I defined users file like: guaraldi Auth-Type := EAP, Cleartext-Password == "mudar123"
wrong! change to guaraldi Cleartext-Password := "mudar123" now, using the SSID of whatever you chose, and the SSL cert you just trusted ...it will.....work! alan
Ok!!!!!!! I will do all the changes.... As soon as possible my new post. Guaraldi 2009/8/18 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>:
Hi,
Hi ALL!!!!!!!!!!!!!!!!!!!!!!!
Hi!
ignore the tutorials. install latest version from source...ensure /usr/local/etc/raddb or /etc/raddb doesnt exist before 'make install'
thenm run the radiusd server...the first time it will make test certs. copy the CA.der server.der to the windows system and install as trusted certificates
I defined users file like: guaraldi Auth-Type := EAP, Cleartext-Password == "mudar123"
wrong!
change to
guaraldi Cleartext-Password := "mudar123"
now, using the SSID of whatever you chose, and the SSL cert you just trusted ...it will.....work!
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Buxey, After generating the certificates the file server.der was not created! Ca.der ok!!! What can I do??? Best regards 2009/8/18 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>:
Hi,
Hi ALL!!!!!!!!!!!!!!!!!!!!!!!
Hi!
ignore the tutorials. install latest version from source...ensure /usr/local/etc/raddb or /etc/raddb doesnt exist before 'make install'
thenm run the radiusd server...the first time it will make test certs. copy the CA.der server.der to the windows system and install as trusted certificates
I defined users file like: guaraldi Auth-Type := EAP, Cleartext-Password == "mudar123"
wrong!
change to
guaraldi Cleartext-Password := "mudar123"
now, using the SSID of whatever you chose, and the SSL cert you just trusted ...it will.....work!
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK Kalik, Thanks! 2009/8/25 Ivan Kalik <tnt@kalik.net>:
Hi Buxey,
After generating the certificates the file server.der was not created! Ca.der ok!!!
What can I do???
It's server.crt.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan Buxey -
Alan DeKok -
Hilton Guaraldi -
Ivan Kalik