[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: Help with EAP-TTLS and PAP
From:       Hans Hering <hans.hering () outlook ! com>
Date:       2015-11-23 13:28:20
Message-ID: BLU436-SMTP12492EDCACD914D2A52B073F9070 () phx ! gbl
[Download RAW message or body]

Thanks for all the replies so far. I already figured this wasn't gonna work without \
touching the clients.

> What version of Windows?
Mostly Windows 8.1 and 10

> Windows 7 and earlier can't do EAP-TTLS/PAP natively.
I don't thing we have Windows 7 clients anymore.

> Pretty much the only options available by default on both are
> EAP-TLS or PEAP/EAP-MSCHAPv2. The latter is ruled out if you have
> passwords in SHA1, so you're just down to certificates. Which
> requires provisioning on the clients.
Right now it's down to using our Active Directory as backend with MSCHAPv2 or \
installing the EAP-GTC plugin on all Windows clients via GPO.

Again, thanks for the feedback, this matter is resolved.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]