Active Directory authentication question

2013-09-18 Thread Roberto Carna
Dear, I have several Windows 7 clients over WiFi autheticating throug EAP-TLS to a Freeradius 2.1 service against a local MySQL database, it works OK. Now I have to change the authentication from MySQL to a remote Active Directory on a Windows 2012 server. Because I don't know so much about

Re: Active Directory authentication question

2013-09-18 Thread Alan DeKok
Roberto Carna wrote: Dear, I have several Windows 7 clients over WiFi autheticating throug EAP-TLS to a Freeradius 2.1 service against a local MySQL database, it works OK. EAP-TLS doesn't use MySQL for storing credentials. Everything is in the certificate. Now I have to change the

Re: Active Directory authentication question

2013-09-18 Thread Roberto Carna
Sorry, so I'm a bit confused... I'm using Windows 7 clients for accesing the WiFi network through EAP-TLS with X.509 certificates. But in this way, I could see that I can authenticate users or hosts...if I choose users, I can see a dialog box to fill user and password and I suppose they are

Re: Active Directory authentication question

2013-09-18 Thread Arran Cudbard-Bell
On 18 Sep 2013, at 15:39, Roberto Carna robertocarn...@gmail.com wrote: Sorry, so I'm a bit confused... I'm using Windows 7 clients for accesing the WiFi network through EAP-TLS with X.509 certificates. But in this way, I could see that I can authenticate users or hosts...if I choose

Re: Active Directory authentication question

2013-09-18 Thread John Dennis
On 09/18/2013 11:01 AM, Roberto Carna wrote: Arran, I have a private CA and I've created the server and client certs of course...and I've generated the .p12 cert (includind the CA cert) to install in my Windows 7 clientsit works OK. What I mean is that EAP-TLS is easier to me than AD

Re: Active Directory authentication question

2013-09-18 Thread Roberto Carna
Arran, I have a private CA and I've created the server and client certs of course...and I've generated the .p12 cert (includind the CA cert) to install in my Windows 7 clientsit works OK. What I mean is that EAP-TLS is easier to me than AD authentication at this point, because I've just put

Re: Active Directory authentication question

2013-09-18 Thread Alan DeKok
Roberto Carna wrote: Sorry, so I'm a bit confused... Because you're unfamiliar with the correct terminology, and with how things really work. To recap: EAP-TLS uses certificates to identify users. And nothing else. No passwords, etc. AD is a database. MySQL is a database. They store

ipad ssl error in free radius

2013-09-18 Thread val john
hi guys we are getting follwong error in our radius log when ipad trying to connect to our WIFI network , our WIFI network using EAP-TTLS + LDAP authentication , All other devices (linux , windows, mac os 10.8 , Suse , android ) are working fine apart from ipads .. Error === Tue Sep 17