18 Apr
2025
18 Apr
'25
9:46 a.m.
On Apr 18, 2025, at 7:56 AM, Yoann Gini <yoann.gini@gmail.com> wrote:
I’m looking at the following Radsec documentation for FreeRadius and I’m lacking some details, maybe someone here can share some guidance? ... My goal here is to simplify the use of FreeRadius by solely relying on Certificate Based Authentication for the client, and so, finding a way to configure FreeRadius to accept all client, regardless of their IP, if they can authenticate with a certificate coming from a specific PKI and that is currently not revoked in the PKI’s CRL.
See raddb/clients.conf. You can use a network and prefix for the clients: ipaddr = 0/0 Alan DeKok.