1 client unable to authenticate via EAP-TLS

[Alan DeKok]

"Terry Zarelli" <terry.zarelli at gmail.com> wrote:
> I have one client that is having a problem authenticating via wireless
> EAP-TLS.  The client is a Windows XP SP2 computer using a an internal Dell
> wireless card.  The client associates with the access point-a Cisco Aironet
> 1130-but is continually reports an "attempting to authenticate" message.
> After, performing a "radiusd -X", I do not see any EAP-start messages; I see
> the following:
> 
> rlm_eap: No EAP Start, assuming it's an on-going EAP conversation

  That isn't the problem.  The problem is most likely that the
certificates don't have the magic Microsoft OID's in them.

  Odds are your other systems that can authenticate aren't Windows,
and therefore don't care about Microsoft nonsense.

  Alan DeKok.