AW: EAP TLS Computer Authentication XP the final Solution *working great after a hard fight* Solution inside
Krämer Armin
Kraemer.Armin at web.de
Sat May 20 12:30:31 CEST 2006
-----Ursprüngliche Nachricht-----
Von: Krämer Armin [mailto:Kraemer.Armin at web.de]
Gesendet: Samstag, 20. Mai 2006 12:04
An: 'misch at multinet.de'
Betreff: AW: EAP TLS Computer Authentication XP the final Solution *working
great after a hard fight* Solution inside
Hi, i read your artikel at this magazine and it was quiete helpful, the only
thing didnt working was machine certificate but like I described at my last
post the only thing I struggled was XP Clients needing the full DN at this
place I described and the CN as Computername and how to import them
correctly. The ldap setup of you were really helpful. Thanks to you.
Greetings from Baden Würtemberg
Armin
-----Ursprüngliche Nachricht-----
Von: misch at multinet.de [mailto:misch at multinet.de]
Gesendet: Samstag, 20. Mai 2006 09:23
An: Krämer Armin
Betreff: Re: EAP TLS Computer Authentication XP the final Solution *working
great after a hard fight* Solution inside
Am Samstag, 20. Mai 2006 09:01 schrieb Krämer Armin:
> Hi,
>
(...)
> An CA created with TinnyCA as frontend for openssl, freeradius @debian
> stable with EAP-TLS Support, LDAP-Backend for Dynamik VLAN Assignment
> Rules, VLAN Routing @ an Layer 3 Core Switch and finaly Clients
> 200,X?,Linux duing firstly an Machine Authentication(*tricky but
possible*)
> pulled into and basically VLAN with the DHCP,DNS and ADS Servers in an
> separate Subnet and VLAN, then Users can log onto the domain, getting
their
> final
> User-Certifikate, thrown into their final working vlan and getting the
> final Subnet from the DHCP. This workes now great put firstly only the
main
> problem, the machine certificates.
Hi,
I did this setup (LDAP, VLAN, Certs, ...) and wrote an article in the German
Linux Magazin 01/05. All problems you list are more or less described there.
Sorry, that I did not read the beginning of this discussion. So I could have
helped you before.
Greetings from Munich,
Michael Schwartzkopff
More information about the Freeradius-Users
mailing list