Authentication failure - PEAP - MS-CHAPv2

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> I think you are using sef-signed ssl certificates in the freeradius server
> and the windows XP client is trying to "validate" them; if that is right
> try to configure windows xp client to not to validate them. Best regards
> and sorry for my english!

self-signed are perfectly fine - but you need to ensure that the CA
used is installed onto the client!

you should *never* run an EAP client without certificate validation

alan