HOWTO PEAP + FreeRadius + XP Client

[Alan DeKok]

George KNIGHT wrote:
> Before I write my question here, I just want to let all of you know that
> I did lots of searching in both google and this email list. But couldn't
> find anything to get the answer. 
>
> My question is I have been looking for a HOWTO paper for a beginner to
> set freeradius as an AAA server in a wireless environment to Windows XP
> SP2 clients. I will use Windows' own PEAP client. Is there such a paper
> someone can give me the link?

$ ./configure
$ make
$ make install
$ radiusd -X

- Un-check "verify server certificate" in Windows (ONLY for testing).

- Add a user to the database (username/password, example in the FAQ)

  That's it.

> I'm very frustrated to find out that there is no information available
> for a setup from the scratch.

  Part of the problem is that in 2.0, there is so little to do...

> I wrote papers like that before for
> various topics such as subversion implementation for a multiple OS
> environment, VoIP implementation with a Linux based open sources S/W
> etc. I have intention to write such a paper for how to set up PEAP
> implementation with freeradius as well. But for that, I'm hoping someone
> can give me a good start.

  The EAP-TLS "howtos" contain additional documentation:

http://freeradius.org/doc/

> Clients are going to be computers with WinCE as their OS and they will
> contact to the LAN wirelessly. What I want to achieve is authenticating
> this clients with server-AAA using PEAP before letting them use the
> other network resources.

  Install 2.0, start the server.

  See also raddb/certs/README.  You can create "real" certificates, and
import them into WinCE.

  There is very, very, little to change in order to get PEAP to work.

  Alan DeKok.