Radius Server - Re: Only validate certificate, not AD account !

Author

Re: Only validate certificate, not AD account !

gbraux@supinfo.com

2007-11-30, 7:23 pm

PS : With your solution, by creating a user in AD matched on the
username IAS tries to authenticate, I got EAP trasaction error after
AD account validation.
The error appears on client side (seen with eapol trace) :
NTE_BAD_KEYSET ... Maybe a certificate problem, but as I am not using
a computer cert template (not entreprise CA), I generated a basic cert
using CertSvr with server and client authentification OID's.
Maybe also the fact that the certificate is absolutely not "linked" to
the computer (no fqdn or others ...). Ther certificate subject or alt
absolutely not match computer name ... It may pose problem on client
side ...