Re: [RADIATOR] Extracting certificates info for EAP PEAP,TTLS,TLS

2015-02-24 Thread Christian Kratzer
Hi Sami, We made progress with our setup thanks to your previous tips. We now have following setup simplyfied a bit: Identifier TunnelledByPEAP=1 AuthByPolicy ContinueWhileAccept AuthBy SQLauthenticate AuthBy INTERNALextractFunnyStuffFromRequ

Re: [RADIATOR] Extracting certificates info for EAP PEAP,TTLS,TLS

2015-02-24 Thread Sami Keski-Kasari
Hello Christian, MSCHAPv2 is mutual authentication protocol where client requires response from server. If the server doesn't send correct response client will terminate connection. So server can not just decide to accept authentication like in PAP case. I think that it is not possible to build wa

Re: [RADIATOR] Extracting certificates info for EAP PEAP,TTLS,TLS

2015-02-24 Thread Hartmaier Alexander
What we've seen is that if a Windows client does EAP authentication, regardless which one, and it fails it doesn't try to do a DHCP request even if you reply a radius success and vlan attributes to the switch. On 2015-02-24 12:12, Christian Kratzer wrote: > Hi Sami, > > We made progress with our s

Re: [RADIATOR] Extracting certificates info for EAP PEAP,TTLS,TLS

2015-02-24 Thread Christian Kratzer
Hi Sami, On Tue, 24 Feb 2015, Sami Keski-Kasari wrote: > Hello Christian, > > MSCHAPv2 is mutual authentication protocol where client requires > response from server. If the server doesn't send correct response client > will terminate connection. > So server can not just decide to accept authenti