9 Jun
2016
9 Jun
'16
9:28 a.m.
On Jun 9, 2016, at 8:03 AM, jan hugo prins <jhp@jhprins.org> wrote:
What I mean is, how do I force it on the Radius server that you can only authenticate using a combination of both certificate and username / password.
You deny EAP-TLS, which is the only EAP method with certificates, but no password. if ((User-Name == "bob") && (EAP-Type == EAP-TLS)) { reject }