Thanks very much.
(Btw I needed to start "Wired AutoConfig" in services.msc in order for the
authentication tab to appear)
Grant Hathaway
Network and Infrastructure Analyst
Certas Energy UK Limited
The Switch
1-7 The Grove - Slough - SL1 1QP
Phone : 01753756965 - Mobile : 07920075818
[email protected]<mailto:[email protected]>
[cid:certas_76080deb-6dcc-42fd-a96d-7a823f6a7a45.gif][cid:safetyf1rst_50886216-b7ea-4c50-abc3-78998a1b9b88.gif]
[cid:finalist-logo_c2180ca4-c389-40e0-a9d4-ca51ef41c8ff.gif]
From: Antoine Amacher [mailto:[email protected]]
Sent: Tuesday, January 17, 2017 2:29 PM
To: [email protected]
Subject: Re: [PacketFence-users] eap.conf
Hello Grant,
Network card propriety/Wireless propriety -> Authentication tab -> Settings
(next to PEP) -> uncheck the box validate server certificate.
Thanks
On 01/17/2017 06:13 AM, Grant Hathaway wrote:
Hi Fabrice,
Thanks for your continued support.
The only place I can see to disable certificate checks in Windows is in
Internet Options/Advanced/security
I just want to disable the Radius certificate check, is this possible?
Thanks
Grant Hathaway
Network and Infrastructure Analyst
Certas Energy UK Limited
The Switch
1-7 The Grove - Slough - SL1 1QP
Phone : 01753756965 - Mobile : 07920075818
[email protected]<mailto:[email protected]>
[cid:[email protected]][cid:[email protected]]
[cid:[email protected]]
From: Fabrice Durand [mailto:[email protected]]
Sent: Monday, January 16, 2017 3:33 PM
To:
[email protected]<mailto:[email protected]>
Subject: Re: [PacketFence-users] eap.conf
Hello Grant,
it's on the supplicant side.
Regards
Fabrice
Le 2017-01-16 à 04:07, Grant Hathaway a écrit :
Thanks Fabrice, that's very helpful.
How do I disable the certificate check for the time being?
Grant Hathaway
Network and Infrastructure Analyst
Certas Energy UK Limited
The Switch
1-7 The Grove - Slough - SL1 1QP
Phone : 01753756965 - Mobile : 07920075818
[email protected]<mailto:[email protected]>
[cid:[email protected]][cid:[email protected]]
[cid:[email protected]]
From: Fabrice Durand [mailto:[email protected]]
Sent: Thursday, January 12, 2017 4:34 PM
To:
[email protected]<mailto:[email protected]>
Subject: Re: [PacketFence-users] eap.conf
Hello Grant,
Le 2017-01-12 à 10:51, Grant Hathaway a écrit :
Hi all,
I think this is a common issue..
I'm getting the below error in the radius log when I connect a windows 7 client
to packetfence.
/usr/local/pf/logs/radius.log
[cid:[email protected]]
There's obviously a certificate trust issue causing the problem. Short term:
Can I disable the certificate check for testing purposes?
yes
Long term: Is there any information or guides you can provide on configuring a
self-signed SSL certificate in eap.conf to work with our Windows domain joined
machines when using a wired connection and domain user login?
We have an ADCS root certification authority in place,s it a case of raising a
CSR for an apache website, I've done this once previously but my mind has gone
blank.
create and a certificate for radius from your AD PKI and install it on pf.
After that configure your supplicant to verify with the AD certificate.
(you can follow 3.1.7
https://packetfence.org/doc/PacketFence_MSPKI_Quick_Install_Guide.html)
Regards
Fabrice
Thanks
Grant Hathaway
Network and Infrastructure Analyst
Certas Energy UK Limited
The Switch
1-7 The Grove - Slough - SL1 1QP
Phone : 01753756965 - Mobile : 07920075818
[email protected]<mailto:[email protected]>
[cid:[email protected]][cid:[email protected]]
[cid:[email protected]]
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected]<mailto:[email protected]> :: +1.514.447.4918 (x135) ::
www.inverse.ca<http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected]<mailto:[email protected]> :: +1.514.447.4918 (x135) ::
www.inverse.ca<http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Antoine Amacher
[email protected]<mailto:[email protected]> ::
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x130 :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and
PacketFence (www.packetfence.org<http://www.packetfence.org>)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
