> >Looking at User cert request ID #52 and Computer cert request ID #40 >(Where the "SSLv3 read client certificate A" error occurs) they are >pretty much identical. The next messages in the sequence (#53/#41) >are also almost identical (the freeradius reply is identical right down >to the EAP-Message blobs in the response). The message after that >is where things appear to go wrong, in User #54, a ton of EAP data >comes in from the client, the client cert details show up, and >authentication seems to be wrapping up; but in Computer #42 barely >anything appears in the EAP blobs and the process appears to start >cycling over again. > >Thanks > >-- Mike Olson >
Yes, there is a mismatch that's something to do with MS adding $ to the end of machine accounts, so certificate data is not sent. I don't know how to fix this but I am sure there are people on the list that do. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

