EAP-TLS obtaining certificates email

Alan DeKok aland at deployingradius.com
Tue Mar 17 10:41:55 CET 2009


Piotr Janusz wrote:
> I have used an outside certificate authority and have few clients that
> have the certicifates' subject similar to:
> E = user-name at domain.tld
> CN = Some-constant-text
> 
> CN is constant on all certificates.
> Freeradius gets the User-name attribute set to CN.
> 
> Any way to substitute the User-name attribute with the email?
> 
> Or have it al least logged with other attributes in detailed log?

  Not really.  The server requires code patches to look inside of the
certificates.

  Alan DeKok.



More information about the Freeradius-Users mailing list