about "freeradius accepts anybody"



Using eap-tls we can make a "filter" to users, based on different attibutes (I think). In my case, the "identity" field in wpa_supplicant.conf.

Freeradius config:

file users contains this
.....
.....
$INCLUDE autorizados
DEFAULT    Auth-Type := Reject
                    Reply-Message = "out"
......
......

file autorizados contains this
"user1"    Cleartext-Password := ""
               Reply-Message = "Autorizando....."
               Fall-Through = No
"user2" ............
...........

I had to make this because I'm not the signer of client certificates, only for server. I hope that somebody will help this.



This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.