forcing client certificate authentication during EAP-PEAP and EAP-TTLS

Alan DeKok aland at
Thu Aug 4 21:12:37 CEST 2005

Michael Wang <mwang25 at> wrote:
> So it seems like radiusd will force client certificate authentication
> during PEAP or TTLS if this particular value pair is set with
> lvalue==1.  But I don't see any code where the
> PW_EAP_TLS_REQUIRE_CLIENT_CERT gets put into the config_items.

  That's up to you.

DEFAULT	 EAP-TLS-Require-Client-Cert := Yes


  See the dictionary file in 1.0.4.

  Alan DeKok.

More information about the Freeradius-Users mailing list