The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
16 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
0answers
23 views

EAP-TLS Passthrough from pppd to Radius?

I am setting up an IPSec+L2TP VPN for a couple of Windows boxes connecting to a Debian 7.6 (Wheezy) machine running ipsec tools and xl2tpd/pppd. Client authentication via mschapv2 works well enough; ...
1
vote
1answer
63 views

Why does Windows CA Server issue multiple certificates for the same user?

I am currently implementing an EAP/TLS WIFI implementation to replace our EAP/MSCHAP2 wifi implementation. I am using Windows Server 2008 and I've installed a certificate authority. User certificates ...
0
votes
0answers
193 views

Configure Mikrotik WPA-EAP to authenticate against local user database

Is it possible to configure a Mikrotik router (RouterOS 6.20) to perform WPA-EAP authentication against the local user database on the Mikrotik? Documentation indicates that all authentication ...
0
votes
1answer
59 views

RADIUS authentication requests not relayed to RADIUS server

I am trying to set up a RADIUS server for 802.1x NAC over a Cisco IE 3000 Network Switch, using freeRadius to implement it. I know the switch knows where the RADIUS server is because I set up the ...
0
votes
0answers
123 views

EAP-TLS MSCHAPv2 Windows Server Certificate Requirements for RADIUS

I am trying to get RADIUS (freeradius) in our Network working, there are still some problems with Microsoft Supplicants which reject the certificate installed on the RADIUS Server There is a ...
1
vote
1answer
96 views

Is using EAP-MD5 in strongSwan a security risk?

Quoting Wikipedia: It offers minimal security; the MD5 hash function is vulnerable to dictionary attacks, and does not support key generation, which makes it unsuitable for use with dynamic WEP, ...
0
votes
0answers
105 views

High number of “MSC service thread” in JBoss 6.1 EAP

I have a vanilla jboss eap 6.1 but starting it up, I get 256 "MSC service thread" fired up. starting from 1-1 to 1-256. I have a limited resource and want to minimise thread count per JVM. What's the ...
0
votes
1answer
84 views

What decides what tunnels inside EAP-TTLS?

If EAP-TTLS is a EAP method that establishes a TLS tunnel, what goes in the tunnel? It could be another EAP method, but it could also be PAP. What decides? The server, the supplicant, or do they ...
0
votes
0answers
663 views

Windows 7 client unable to connect to Cisco Wireless Access point

My windows 7 pc is unable to connect to Cisco's Aironet 1040 AP(autonomous) AP is configured to use EAP with local RADIUS server. AP debug messages indicates RADIUS server rejected Windows client ...
0
votes
1answer
112 views

LEAP vs EAP/TLS?

I am given a choice between: LEAP Wireless Client ID 802.1x (EAP/TLS) Wireless Client ID (Digital Certificates) To connect to a wireless network. What are the differences? Which one would you ...
0
votes
1answer
276 views

JBoss AS EAP versions - What parts of EAP source code are closed source?

Question about the source code for JBoss EAP versions 4 5 or 6. Let's say we decided to purchase JBoss EAP 6 from RedHat. Can we still run maven to build JBoss EAP version? Are there closed source ...
4
votes
2answers
670 views

What should I use instead of MS-CHAP v2?

There's a new tool and service that makes it very easy to break MS-CHAP v2, which is used to secure VPNs. A good summary of the attach against MS-CHAP can be found at Ars Technica. Here's the way I ...
4
votes
2answers
11k views

Troubleshooting Windows EAP/RADIUS connectivity issues

So, I guess the short version of the question is: I'm unable to get clients to connect to an enterprise-WPA wireless network after setting up a "new" NPS server and a new CA. After I manually ...
3
votes
1answer
2k views

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via ...