Certificate problem between 3.0.11 and 3.1.x

Matthew Newton mcn4 at leicester.ac.uk
Tue Mar 15 17:00:19 CET 2016


On Tue, Mar 15, 2016 at 03:53:25PM +0000, Jonathan Gazeley wrote:
> On 15/03/16 15:47, Arran Cudbard-Bell wrote:
> >Any idea what machine auth actually is.  Is it something weird like EAP-TLS in EAP-TLS?
> 
> It's EAP-PEAP using the default Windows supplicant.

What's the inner? MSCHAPv2 or EAP-TLS.

i.e "Machine auth" with domain credentials (machine account p/w)
or certificates?

PEAP/EAP-TLS runs into MTU issues as Arran said, but I'd expect
that to be the same on 3.0.x and 3.1.x. But you probably need to
enable debugging on the Windows supplicant side and see what it's
complaining about.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list