PEAP with Machine auth

[Phil Mayers]

On 26/10/11 16:14, Phil Mayers wrote:

> Sorry, this is long.
>
> tl;dr version - under Windows 7, if you import the CA certificate into
> the "Trusted Root Certification Authorities" hierarchy in the MMC
> "Certificates" snap-in, Windows 7 user- and machine-auth work just fine
> against an out-of-the-box FreeRADIUS 2.1.12 with only two minor changes.
>
> It works for me.

I've also tested the "802.1x single sign-on" functionality in Windows 7. 
Again, with the certs in the appropriate place, this just works. The 
machine authenticates as itself - host/name.domain.com - and when you 
enter your username/password, it de-auths and re-auths as "DOM\user"