I've got a handful of windows clients. I'm most concerned about the
Windows 7 machines, but there are a few Vista, and even an XP client. I
want to deploy "Machine account certificates" for wifi authentication,
so machines will be able to connect to the network BEFORE the user logs
on (mainly for accessing remote shares), but only some of these machines
are connected to the local DOMAIN (Samba 3, not overly relevant I don't
think). What I would like to know is what should, or must, or what have
you, the CN or DN attribute on the certificates for these systems look
like to be used for machine authentication. I've tried just placing
certificates with cn=hostname,... to the certificate store for the
machine account, but they're never used, and the machine complains about
not having a certificate when I try t connect to wifi.
Also, most of these machines are wifi, though I plan to deploy radius on
the switch soon (once the machine auth with wifi is working).
I know this is a little off topic, but as it all relates to radius, I
hope someone here will know the proper answer(s) or where to find clear
concise documentation explaining this.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
