Hi, I would like to use FreeRADIUS on either Debian or FreeBSD stable for VPN user authentication. Authentication should be based on the following information: a) username+MIT Kerberos password b) MAC address of the machine c) OTP generated by e.g. a Yubikey device d) (possibly) a client certificate or a public/private key pair (either created by SSH or GPG) (The combination of b) and d) would uniquely identify the machine; the combination of a) and c) would uniquely identify the user). I would like to store this information in LDAP DIT (served by OpenLDAP). Up to now, I've only used OpenLDAP for POSIX+Samba account info und MIT Kerberos related data. My questions are: - Is there any current documentation for such a (or a quite similar) scenario? Up to now, one documentation I found was http://vuksan.com/linux/dot1x/802-1x-LDAP.html but this one is related to MAC authentication for WLAN setups - Are there any web frontends and/or GUI frontends offering support for the RADIUS schema? Thanks in advance for any info and kind regards, Holger