Re: TLS Alert read:fatal:bad certificate

> 2) I notice now that the certificate validation is working that I no
> longer am prompted to enter my username and password. Even after
> rebooting the WinXP computer, the connection to freeradius occurs
> automatically. I suppose this might be convenient in some circles
> but it's also a security risk in that if someone were to borrow my
> computer they would not be challenged before getting access to the
> network. Does anyone know where WinXP stores this info and if it
> can be configured to always prompt for user/pass?
>
[HKEY_CURRENT_USER\Software\Microsoft\EAPOL\userEap Info\]


You can make eapol.reg file that will delete this info

=09Windows Registry Editor version 5.00
=09[HKEY_CURRENT_USER\Software\Microsoft\EAPOL]
=09[-HKEY_CURRENT_USER\Software\Microsoft\EAPOL\userEap Info\]
=09[HKEY_CURRENT_USER\Software\Microsoft\EAPOL\userEap Info\]

Then make an Xeapol.bat file to=20

=09regedit /u /s c:\windows\eapol.reg

Use gpedit.msc to add this batch file into the user configuration logoff=20
scripts.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html