Hello Grant,
it's on the supplicant side.
Regards
Fabrice
Le 2017-01-16 à 04:07, Grant Hathaway a écrit :
>
> Thanks Fabrice, that’s very helpful.
>
>
>
> How do I disable the certificate check for the time being?
>
>
>
> Grant Hathaway
> Network and Infrastructure Analyst
>
> Certas Energy UK Limited
> The Switch
> 1-7 The Grove - Slough - SL1 1QP
> Phone : 01753756965 - Mobile : 07920075818
> [email protected]
> <mailto:[email protected]>
>
>
>
> *From:*Fabrice Durand [mailto:[email protected]]
> *Sent:* Thursday, January 12, 2017 4:34 PM
> *To:* [email protected]
> *Subject:* Re: [PacketFence-users] eap.conf
>
>
>
> Hello Grant,
>
>
>
> Le 2017-01-12 à 10:51, Grant Hathaway a écrit :
>
> Hi all,
>
>
>
> I think this is a common issue..
>
> I’m getting the below error in the radius log when I connect a
> windows 7 client to packetfence.
>
> /usr/local/pf/logs/radius.log
>
>
>
>
>
> There’s obviously a certificate trust issue causing the problem.
> Short term: Can I disable the certificate check for testing purposes?
>
>
>
> yes
>
> Long term: Is there any information or guides you can provide on
> configuring a self-signed SSL certificate in eap.conf to work with
> our Windows domain joined machines when using a wired connection
> and domain user login?
>
> We have an ADCS root certification authority in place,s it a case
> of raising a CSR for an apache website, I’ve done this once
> previously but my mind has gone blank.
>
> create and a certificate for radius from your AD PKI and install it on pf.
> After that configure your supplicant to verify with the AD certificate.
>
> (you can follow 3.1.7
> https://packetfence.org/doc/PacketFence_MSPKI_Quick_Install_Guide.html)
>
> Regards
> Fabrice
>
>
>
>
> Thanks
>
>
>
>
>
> Grant Hathaway
> Network and Infrastructure Analyst
>
> Certas Energy UK Limited
> The Switch
> 1-7 The Grove - Slough - SL1 1QP
> Phone : 01753756965 - Mobile : 07920075818
> [email protected]
> <mailto:[email protected]>
>
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> Developer Access Program for Intel Xeon Phi Processors
>
> Access to Intel Xeon Phi processor-based developer platforms.
>
> With one year of Intel Parallel Studio XE.
>
> Training and support from Colfax.
>
> Order your platform today. http://sdm.link/xeonphi
>
>
>
>
> _______________________________________________
>
> PacketFence-users mailing list
>
> [email protected]
> <mailto:[email protected]>
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> --
> Fabrice Durand
> [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x135) ::
> www.inverse.ca <http://www.inverse.ca>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
> (http://packetfence.org)
>
>
>
>
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
>
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
