authentication options

[Stefan Paetow]

> I installed my certs on my Android phones... it asked for the password for the key, andI was off... just set it to 802.1x TLS and it worked.

Ok. 

> Now, on my Nook Color, I was able to add my cert, but this time, it only let me choose 802.1x EAP.  That's fine I thought, but then it was looking for a username/password for a user in my MySQL database on the radius server.  That's fine with me too, but I am trying to understand why that one device was the only one that wanted a username/password.

That's because the Nook is not doing EAP-TLS, but rather something like EAP-TTLS with PAP (according to Google). So yes, you'll need to add a username and password to your server for the Nook to use.

> Now, on Ubuntu, if I choose PEAP, it only asks for the cacert plus a use/pass from my mysql database. 

Correct. PEAP needs a username and password. 

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at jabber.dev.ja.net
skype: stefan.paetow.janet
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

jisc.ac.uk
 
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150416/86322795/attachment.sig>