Re: eap/tls and central users file

Norbert Wegener <nw@sbs.de> wrote:

Would it be possible, that fr only validates the certificates and proxies the CN as username to a central fr, that has the complete user db? If so, how could it be achieved?

That's a bit awkward, because the proxied requests won't have any authentication data. A different solution would be to proxy *all* requests centrally, or copy some of the database information from the central site to the remote sites. Alan DeKok.