+ Post New Thread
Results 1 to 3 of 3
How do you do....it? Thread, Wireless Setup in Technical; Ritey Oh!...First off and I must apolagies about this, going over the same old topic of Wireless Setups, i have ...
  1. #1
    mmoseley's Avatar
    Join Date
    Apr 2007
    Location
    Birmingham
    Posts
    749
    Thank Post
    109
    Thanked 105 Times in 80 Posts
    Blog Entries
    2
    Rep Power
    43

    Wireless Setup

    Ritey Oh!...First off and I must apolagies about this, going over the same old topic of Wireless Setups, i have gone over previous threads but nothing that can answer me for sure,

    Ive been playing around with MS IAS for our RADIUS server, which is fine and no problems setting up at all,

    Now what i do have a problem is how the stupid thing works lol, I can get the wireless to connect right, but only after its joined to our network and its automatically downloaded the certificate it needs (which is via GPO),

    Now to me this isnt ideal...Why would you physically connect the laptop and then go off and use it wirelessly?...is that not backward?

    Is there any sort of Guest setting? or how to setup a guest client?, Im sorry if im going over the same questions/topics!

    Only other way i can get a client to connect is by manually telling the client NOT to check server certificates.

    Many MANY thanks in advance!

    Mart

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,505
    Thank Post
    227
    Thanked 848 Times in 727 Posts
    Rep Power
    287
    if i remember correctly if you point a client an http:\\servername\certserv (you will have to check iis for exact web address as i only have it in 1 school and it was set up by the "prefered" internet provider so im not exacly an expert in it) then users can get their own certificate

    p.s. how do you get clients to automaticcaly download a certificate ive been having to do it via mmc console

  3. #3

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,859
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    Quote Originally Posted by mmoseley View Post
    Now to me this isnt ideal...Why would you physically connect the laptop and then go off and use it wirelessly?...is that not backward?
    So that you can be confident that you transferred the cryptographic certificate to the machine in a trustworthy manner (i.e. you can be sure you didn't get some imposter's certificate, which would let them read your secrets).

    Is there any sort of Guest setting? or how to setup a guest client?, Im sorry if im going over the same questions/topics!
    Not in RADIUS; guest access is a feature of your authentication provider, which in your case is IAS and doesn't have such a thing.

    Only other way i can get a client to connect is by manually telling the client NOT to check server certificates.
    This is BAD; you want certificate checking so you can be sure your clients aren't leaking authentication details to a rogue access point. For the same reason, it is vital to ensure your certificate key is kept properly secured.

    Quote Originally Posted by sted View Post
    if i remember correctly if you point a client an http:\\servername\certserv (you will have to check iis for exact web address as i only have it in 1 school and it was set up by the "prefered" internet provider so im not exacly an expert in it) then users can get their own certificate
    That would be http://yourserver/certsrv, where yourserver is the name of your certification authority server.

    p.s. how do you get clients to automaticcaly download a certificate ive been having to do it via mmc console
    You need to push the certification authority root certificate to the clients through group policy (computer configuration -> windows settings -> security settings). For non-domain members, you need to import the root certificate by hand (checking the certificate fingerprint, expiry date and so on as you go, of course).

    Paranoia is a good thing with cryptographic material.

  4. Thanks to powdarrmonkey from:

    sted (8th January 2010)

SHARE:
+ Post New Thread

Similar Threads

  1. New Wireless setup
    By kaoyang in forum Wireless Networks
    Replies: 5
    Last Post: 5th October 2009, 07:48 AM
  2. wireless setup
    By lionsl2005 in forum How do you do....it?
    Replies: 8
    Last Post: 21st May 2009, 02:31 PM
  3. How do you setup a wireless router?
    By andrew_91090 in forum Wireless Networks
    Replies: 5
    Last Post: 3rd March 2009, 09:32 AM
  4. Wireless setup
    By marvin in forum Windows
    Replies: 2
    Last Post: 7th November 2008, 01:07 PM
  5. Wireless setup
    By marvin in forum Wireless Networks
    Replies: 2
    Last Post: 17th January 2008, 04:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •