HOWTO PEAP + FreeRadius + XP Client

[Ivan Kalik]

For peap you need to import the CA certificate into trusted root store on
Win XP.

Ivan Kalik
Kalik Informatika ISP


Dana 30/4/2008, "George KNIGHT" <georgeknight at gmail.com> piše:

>Hello Marco,
>I really appreciate your help. The link you gave is way more helpful then
>most other stuff on the net.
>
>One thing that still not clear to me is which certificates I have to place
>to the Windows? There are so much information about certificates but no one
>clearly says which certificate goes where at the server and the XP client.
>
>After I installed the FreeRadius 2.0.2 on my SuSE SLES box, under the
>/etc/raddb/certs folder, there are following certificates;
>
>server.crt - server.key - server.pem - server.cnf - server.csr - server.p12..
>
>Can I test my environment by using these certificates? I just don't know how
>to use the certificates. Last week I was messing around the openssl to
>create certificates but ended up mixing everything. That's why I reinstalled
>the whole OS, reinstalled the freeradius cleanly again. Before I go ahead
>and mess around again, I just want to have the instructions.
>
>One more thing, I won't be using any LDAP or AD in a Windows environment. I
>just want my clients to be authenticated against freeradius AAA based on
>PEAP.
>
>Thank you.
>
>
>On Wed, Apr 30, 2008 at 3:39 AM, Marco Gaiarin <gaio at sv.lnf.it> wrote:
>
>> Mandi! George KNIGHT
>>  In chel di` si favelave...
>>
>> > My question is I have been looking for a HOWTO paper for a beginner to
>> set
>> > freeradius as an AAA server in a wireless environment to Windows XP SP2
>> > clients. I will use Windows' own PEAP client. Is there such a paper
>> someone
>> > can give me the link?
>>
>> A very good starting point is:
>>
>>
>> http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO
>>
>> if you have a samba domain, simply ignore all the 'AD' stuff, the real
>> point here are make ntlm_auth work, normally it suffices to install
>> winbindd.
>>
>> --
>> dott. Marco Gaiarin                                 GNUPG Key ID: 240A3D66
>>  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
>>  Polo FVG  -  Via della Bontŕ, 7 - 33078  -  San Vito al Tagliamento (PN)
>>  marco.gaiarin(at)sv.lnf.it      tel +39-0434-842711  fax +39-0434-842797
>>
>>                Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>>           http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
>>        (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>