question about windows users

[Ivan Kalik]

>>>What "doesn't work"? Post the debug.
> server:
> I dont change in my config file, is the same like in first message,
>
> client (win xp):
> I have local connection->authentication->method->eap(peap)->properties:
>    validate server cert (marked checkbox),
>    marked cacert.pem,
>    secured password eap-mschapv2 - use my windows logon
>
> it work's properly, but only with correct user/pass in
> /etc/freeradius/users
> file

OK. That's PEAP.

>
> now I change
> local connection->authentication->method->smart card or other
> certificate->properities:
>    validate server cert (marked checkbox),
>    marked cacert.pem,
> local connection->authentication->keep in memory inf about users for
> aditional network connection (unmarked checkbox - when marked nothing
> happend at all)
>
> debug
>
> Listening on authentication *:1812
> Listening on accounting *:1813
> Ready to process requests.
> rad_recv: Access-Request packet from host 192.168.5.206:1812, id=37,
> length=159
>         NAS-IP-Address = 192.168.5.206
>         NAS-Port = 50046
>         NAS-Port-Type = Ethernet
>         User-Name = "PC-01\\Administrator"
>         Called-Station-Id = "00-0C-30-81-9B-EE"
>         Calling-Station-Id = "00-0A-E4-13-1A-02"
>         Service-Type = Framed-User
>         Framed-MTU = 1500
>         EAP-Message =
> 0x0200001b014e4c504c2d4943455c41646d696e6973747261746f72
>         Message-Authenticator = 0x2430d7c8a84cc54874addee9104cf076
> rlm_eap: Identity does not match User-Name, setting from EAP Identity.

The name on the certificate is not the same as that User-Name. Fix that.

Ivan Kalik
Kalik Informatika ISP