Dear all,

I installed Freeradius as instructed on their page, and did the radtest and all went fine.

Then I configured my Wireless AP to authenticte using the Freeradius as the Authentication server.

I created the CA, put the server certificate in Freeradius, and then I had a Windows XP client connect to the AP but got rejected (obviously because there wasn't a client certificate there yet!)

Then I installed the Client Certificate, and it got authenticated. The Name I put on the certificate when it was created was also a user in the Freeradius User Database. And the client was authenticated.

Then I removed that User from the Freeradius User Database, and here was the surprise: The client STILL was authenticated!!

Wasn't the User name supposted to be in the Database? or is it that the clients only need a certificate signed by the CA to authenticate?

--Yow