(RADIATOR) 802.1X TTLS/MD5

[Mike McCauley]

Hello Kevin,


On Tue, 9 Sep 2003 03:18 am, Kevin Schmidt wrote:
> On Mon, 8 Sep 2003 09:21:59 +1000 Mike McCauley <mikem at open.com.au>
>
> wrote:
> > On Mon, 8 Sep 2003 04:48 am, Kevin Schmidt wrote:
> > > I'm trying to do a little 802.1X experimentation and am having
> > > limited success, so any pointers are welcome
>
> ...
>
> > Looks to me like Radiator delivered the server certificate to the
> > client, after which things go badly.
> > I suspect that the client didnt like the certificate for some reason.
> > Usually that means that the client is configured to check the server
> > certificate, but the servers root certificate has not yet been
> > installed on the client. Is that possible?
>
> The client has the proper root cert, and I tried it with server cert
> validation disabled -- same results.
>
> > The Radiator FAQ has some tips for how to find out what the problem in
> > the client might be.
>
> I didn't see anything directly applicable, but I'll try dropping down to
> plain WinXP PEAP/MSCHAP-V2 (no Meetinghouse) and see what happens.

OK, pls keep me posted.

Cheers.

>
> Kevin Schmidt                                kps at ucsb.edu
> Campus Network Programmer                    (805) 893-7779
> Office of Information Technology             (805) 893-5051 FAX
> University of California, Santa Barbara
> North Hall 2124
> Santa Barbara, CA 93106-3201

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985                       Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.