Re: EAP-TLS used to be working, replaced Wifi AP, reimported backed-up config, EAP-TLS not working anymore
If you haven't touched FR then don't look there as that's not what has changed. Tour problem has already been identified - the bit that got changed. No changes should be made on FR or on the clients alan
Alan, Thank you for your answer. I know you must be right, but I still didn't manage to have it working again. I'm still getting troubles with TLS exchanges and don't know enough of it to be able to debug it. I read tons of threads where Alan DeKok kept repeating to read his website, as well as using default configuration which is know to work. I also read that those EAP sessions not finishing where only due to certs problems or fragmentation. Certs are fine, fragmentation should be ok. I completely started the AP's configuration again, from factory defaults, not using the backup, only setting the strict minimum (WPA2-Enterprise, shared key, radius IP), the remaining parameters being left to default values. I still have no clue on what is going wrong. Best regards, Benjamin Le Thu, 21 Jun 2012 20:32:02 +0200, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> a écrit:
If you haven't touched FR then don't look there as that's not what has changed. Your problem has already been identified - the bit that got changed.
No changes should be made on FR or on the clients
alan
Benjamin Malynovytch wrote:
I read tons of threads where Alan DeKok kept repeating to read his website, as well as using default configuration which is know to work. I also read that those EAP sessions not finishing where only due to certs problems or fragmentation. Certs are fine, fragmentation should be ok.
There's an EAP-TLS Howtow on the main freeradius site. It's also pointed to from the wiki. Follow it, and it *will* work.
I completely started the AP's configuration again, from factory defaults, not using the backup, only setting the strict minimum (WPA2-Enterprise, shared key, radius IP), the remaining parameters being left to default values.
I still have no clue on what is going wrong.
The problem is that no one *else* has a clue about it either. When I set systems up, I follow the instructions from the guide. Doing anything else means it likely won't work. Alan DeKok.
Dear Alan, I was wondering how long you would wait to answer me to RTFM ! Thank you for your *great* contribution. Benjamin. PS: Do you sometimes read peoples messages or do you just use automatic answers ? Le Mon, 25 Jun 2012 14:29:23 +0200, Alan DeKok <aland@deployingradius.com> a écrit:
Benjamin Malynovytch wrote:
I read tons of threads where Alan DeKok kept repeating to read his website, as well as using default configuration which is know to work. I also read that those EAP sessions not finishing where only due to certs problems or fragmentation. Certs are fine, fragmentation should be ok.
There's an EAP-TLS Howtow on the main freeradius site. It's also pointed to from the wiki. Follow it, and it *will* work.
I completely started the AP's configuration again, from factory defaults, not using the backup, only setting the strict minimum (WPA2-Enterprise, shared key, radius IP), the remaining parameters being left to default values.
I still have no clue on what is going wrong.
The problem is that no one *else* has a clue about it either.
When I set systems up, I follow the instructions from the guide. Doing anything else means it likely won't work.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Benjamin MALYNOVYTCH
Benjamin Malynovytch wrote:
Thank you for your *great* contribution.
You're welcome.
PS: Do you sometimes read peoples messages or do you just use automatic answers ?
I read *everything* on this list. I generally answer *good* questions. I ignore *bad* questions. But yes, many answers are boilerplate. I'd like to use automatic answers, but that's not really possible. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Benjamin Malynovytch