Re: Freeradius + Kerberos + Windows clients

[Giorgio Pioda <gfwp@ticino.com>]

On Tue, Sep 03, 2013 at 06:00:37PM +0200, Wolfgang Schweer wrote:
> On Tue, Sep 03, 2013 at 05:22:29PM +0200, Giorgio Pioda wrote:
> > 
> > Do I have to regenerate the sha1 hash of the RootCA ?
>  
> IIRC: No. The certificate isn't used. If asked on the client skip that 
> point. 
> 
> (This could be better from a security point of view. But otherwise you 
> would have to provide the cert to the clients and it would have to be 
> installed there.)
> 
> So only the zip file has to be extracted on the Windows machine (C:)...
> 
> Wolfgang

Hi,

we have tested it (actually my jung assistant) and the SecureW2 EAP-TTLS option in the
scrolldown menu is NOT there in Win7. I think he has just uncopressed the zip and
double clicked the exe, which appears to be self extracting.

Are some security setup that prevents SecureW2 use? (If yes, an idea to circumvent them?)

Are some additional config necessary?

Regards

Giorgio


-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Uff. +41 91 735 62 48