PEAP/TTLS

[Matthew Newton]

On Fri, Sep 23, 2016 at 07:20:29PM +0000, Peter Lesko wrote:
> I'm having a similar issue to the one described here:
> http://freeradius.1045715.n5.nabble.com/PEAP-TTLS-and-Client-certificates-td3238845.html
> 
> Currently, I can auth with just a signed cert, or just username/password
> 
> I would like to enforce both, but I have been unable to determine the
> correct keywords/config after reading many forum posts, in addition to the
> comments provided in the default configuration

Just check your client's supplicant capabilities first.

Many can't do this at all. For example I am not aware of any
version of Windows where this will work. One or the other, yes.
Both, no.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>