AW: AW: PEAP+MSCHAP+AD (please help)

2006-12-13 Thread Hector.Ortiz
Hi, I've followed Phil's advice and ran netsh ras set tracing * enable on the windows client. I tried first one automatic login and then a manual one. The CHAP log generated by Windows is as follows: [356] 12-11 13:11:49:953: RasEapGetIdentity [356] 12-11 13:11:49:953: ReadUserData [356] 12-11

AW: PEAP+MSCHAP+AD (please help)

2006-12-11 Thread Hector.Ortiz
Hello. No, I haven't edited the debug output. Why would I do this if I have a problem that want to get solved??. The debug output is exactly what I get from FreeRadius. There have been more people in this list with the same problem, being the latest http://www.mail-archive.com/freeradius-user

AW: Mac based auth

2006-11-29 Thread Hector.Ortiz
Hi, we have deployed an OpenSource MAC based solution which optionally tied to FreeRadius. With this you can have better control of the MAC addresses that you have in your network. - For non 802.1x capable devices, we have the option of using "VMPS" or performing a MAC-Auth-Bypass if your swi

AW: freeradius and ntlm_auth howto

2006-11-06 Thread Hector.Ortiz
Actually this is the exact same problem I have. I need to type my credentials in for authentication to work. If I let windows do it, I won't get in.    If any of you could please help us out with this issue, that'd be great   Cheers   Héctor     Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTE

Issuing certificates with a Windows CA for PEAP auth

2006-10-20 Thread Hector.Ortiz
When generating certificates for use by FreeRadius EAP-TLS, there is an extension which is to be added to the certificate in order for the client to be able to validate the certificate against a root CA certificate. If such extension is not present in your FreeRadius certificate, the auth proces

AW: PEAP-MSCHAP failure. Please help

2006-10-19 Thread Hector.Ortiz
Thanks for your answers, I forgot to mention that when I generated the certs I did use the OID. When I look at the certs' details, one of those details reads "Enhanced key usage: Server Authentication (1.3.6.1.5.5.7.3.1)" Even with this, it doesn't work. I'll try generating (once again) the cert

FreeNAC: OpenSource NAC

2006-08-29 Thread Hector.Ortiz
FreeNAC provides easy to use VLAN assignment and LAN access control for Cisco Switches and all kind of network devices (Servers, Workstations, Printers, IP-Phones, Webcams...). FreeNAC can be considered as having two phases. Initially, we have taken OpenVMPS (which provides MAC based access con