Humm yes, but with this i can use mschapv2 for authenticate or my authentification will be used by client certificat ? 2011/12/15 Phil Mayers <p.mayers@imperial.ac.uk>
On 15/12/11 14:29, Vincent Guardiola wrote:
Hi all,
I have just one question about client certificats with EAP-TTLS or EAP-PEAP.
I would like use certificats client with authentication MSCHAPv2 it's possible ?
Yes. This is documented in the "eap.conf":
# You can make PEAP require a client cert by setting # # EAP-TLS-Require-Client-Cert = Yes # # in the control items for a request.
In the *outer* tunnel, do this:
authorize { ... update control { EAP-TLS-Require-Client-Cert = Yes } ... eap }
I know it says EAP-TLS; ignore that. It will make the PEAP client send a client cert. - List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>