Hi!

> However Stefan, on this list, suggested me to user SecureW2 supplicant and
> all my problem is disappeared.
> See my post at the benginning of month.

While that's the best thing to do, there may be people forced to go with the 
built-in supplicant and that have to care about the ertificate extensions 
required by MSFT. For TLS, things are even a little worse than for TTLS, 
since also the client certificate needs to have an OID extension in place. 

There's a documentation on server and client OIDs on the FreeRADIUS website, 
see

http://www.freeradius.org/doc/EAPTLS.pdf

The OIDs are mentioned in chapter 10 (examples on cert generation earlier in 
the document); the server OID is the same for TTLS.

Greetings,

Stefan Winter

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: [EMAIL PROTECTED]     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473

Attachment: pgpfj6FLnVbKd.pgp
Description: PGP signature

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to