Hello Grant,
Le 2017-01-12 à 10:51, Grant Hathaway a écrit :
>
> Hi all,
>
>
>
> I think this is a common issue..
>
> I’m getting the below error in the radius log when I connect a windows
> 7 client to packetfence.
>
> /usr/local/pf/logs/radius.log
>
>
>
>
>
> There’s obviously a certificate trust issue causing the problem. Short
> term: Can I disable the certificate check for testing purposes?
>
>
>
yes
>
> Long term: Is there any information or guides you can provide on
> configuring a self-signed SSL certificate in eap.conf to work with our
> Windows domain joined machines when using a wired connection and
> domain user login?
>
> We have an ADCS root certification authority in place,s it a case of
> raising a CSR for an apache website, I’ve done this once previously
> but my mind has gone blank.
>
create and a certificate for radius from your AD PKI and install it on pf.
After that configure your supplicant to verify with the AD certificate.
(you can follow 3.1.7
https://packetfence.org/doc/PacketFence_MSPKI_Quick_Install_Guide.html)
Regards
Fabrice
>
>
> Thanks
>
>
>
>
>
> Grant Hathaway
> Network and Infrastructure Analyst
>
> Certas Energy UK Limited
> The Switch
> 1-7 The Grove - Slough - SL1 1QP
> Phone : 01753756965 - Mobile : 07920075818
> [email protected]
> <mailto:[email protected]>
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
>
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
