Peap authentication without the root ca on the clients

[BERNHARD FIEGLMUELLER]

Hi

why does the peap authentication also work if you dont push the root ca from the acs ca to an client.

it seems that the peap authentication also works if you dont click on "validate server certificate" (under: http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00801df0e4.shtml#wc-2

point 5)

and also if you dont even have the ca on the client.

is this an configuration error?

regards Bernhard

[rsumpter]

Did you generate your own certificate for the ACS or did you purchase one from Verisign?

[BERNHARD FIEGLMUELLER]

i generate my own, i know that official root cas are in the OS already. =)

bernhard