For using EAP-TLS with the Windows Mobile devices I still have to solve one problem, which I think would be no problem for you, the problem with the username of the devices.
If I disable the option "check_cert_cn = %{User-Name}" in eap.conf I get a working configuration, but finally it should work also with that Option enabled. The problem of the Windows Mobile devices is, that they always submit as username "DOMAIN\user". If you leave the DOMAINNAME blank still "\user" is used.
Hi, in version 1.1.7 i used following configuration to cut off the "host/" in front of the username. in users-file: DEFAULT Prefix == "host/" the new value will be written in the attribute "stripped-user-name". so i had to change the value in eap.conf to the following setting: check_cert_cn = %{Stripped-User-Name} Maybe that will work in your configuration... Sebastian -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger