<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt">There was a post on this by Mike;<br><br>You'll have to set up two instances of the EAP module. The first <br>instance will have the TLS submodule set up with the information for <br>Cert1.pem (and the appropriate key and CA cert). The second instance <br>will have its TLS submodule set with the info for Cert2.pem. It will <br>look something like this:<br><br>modules {<br> ...<br> eap eap1 {<br> ...<br> tls {<br> certificate = Cert1.pem<br> ...<br> }<br> }<br> eap eap2 {<br> ...<br> tls
{<br> certificate = Cert2.pem<br> ...<br> }<br> }<br>}<br><br>authorize {<br> ...<br> eap1<br>}<br><br>authenticate {<br> ...<br> eap1<br> eap2<br>}<br><br><br><br>Then, this is one of the few instances where you'll need to manually <br>specify the Auth-Type in the users file, like this:<br><br>DEFAULT Called-Station-ID = "00112233445566:SSID1", Auth-Type := eap1<br>DEFAULT Called-Station-ID = "00112233445566:SSID2", Auth-Type := eap2<br><br>Or, better yet, use regexes (this should work):<br>DEFAULT Called-Station-ID =~ ":SSID1$", Auth-Type := eap1<br><br><br><div> </div>==================================================<div> </div><div>Benjamin K. Eshun<div style="font-family: times new roman,new york,times,serif; font-size:
12pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Message d'origine ----<br>De : Don Peoples <dpeoples@NAVINI.com><br>À : freeradius-users@lists.freeradius.org<br>Envoyé le : Mardi, 29 Mai 2007, 23h27mn 06s<br>Objet : Multiple server certificates in EAP-TLS or EAP-TTLS<br><br><div>Multiple RADIUS clients can be defined in the clients.conf file. Is there a way to define the location of a server certificate for each client? I'm envisioning a single freeRadius server supporting multiple client authenticators. I want each authenticator to be able to send a unique certificate to identify itself to its supplicants. It appears that the "certificate_file" parameter in the eap.conf file would only support a single certificate.<br><br><br>- <br>List info/subscribe/unsubscribe? See <a target="_blank"
href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div><br></div></div></div><br>
<hr size="1">
Ne gardez plus qu'une seule adresse mail ! <a href="http://www.trueswitch.com/yahoo-fr/">Copiez vos mails</a> vers Yahoo! Mail </body></html>