Problems compiling Freeradius 2.0.4 on Fedora 8.

2008-06-07 Thread Piero Giobbi
Hi all. Trying to upgrade my radiusd from 1.1.7 to 2.0.4. When i try make i get this at the end: /root/freeradius-server-2.0.4/libtool --mode=link gcc -o radeapclient radeapclient.lo libeap/libfreeradius-eap.la -lnsl - lresolv -lpthread -lcrypto -lssl -lcrypto gcc -o .libs/radeapclient

Re: Problems compiling Freeradius 2.0.4 on Fedora 8.

2008-06-07 Thread A . L . M . Buxey
hi, what version of OpenSSL do you have? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: logging of tls logons

2008-06-07 Thread Vladimir Vassiliev
So, how can I get in logs exactly common names? As I understand, only way to do it is check_cert_cn = %{User-Name} in eap.conf? -- Vladimir Vassiliev [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: EAP-TLS with different CA per user?

2008-06-07 Thread SecureW2 (List)
Frank, It is not really a configuration issue, but more an Identity Management issue. It is not common to have a CA per user, but a CA per domain. And per domain you have users. So: User X from domain A has CA 1. User Y from domain B has CA 2. If this is what you are trying to achieve you can

Re: EAP-TLS with different CA per user?

2008-06-07 Thread Matt Causey
In our company, we do have certificates signed by multiple Certificate Authorities...but there is a hierarchy. So, some users come in from Domain A (root CA) some come in from Domain B (intermediate CA). So then it's easyjust maintain the CA_path containing the root and any necessary

Re: EAP TLS Authentication failing!!!! Unknown CA

2008-06-07 Thread Matt Causey
I'm happy to be wrong about this, but in my experience, this parameter: -CApath ca.pem Needs to be an actual path, not a PEM CA file, where you have performed these steps: download certificate authority cert in PEM format run c_rehash . (openssl script) On Thu, May 15, 2008 at 10:37 AM,

Re: EAP-TLS with different CA per user?

2008-06-07 Thread Frank Sweetser
SecureW2 (List) wrote: Frank, It is not really a configuration issue, but more an Identity Management issue. It is not common to have a CA per user, but a CA per domain. And per domain you have users. In general, I certainly agree. The catch is that I'm attempting to handle certs and