eap/tls and central users file

[Alan DeKok]

Norbert Wegener <nw at sbs.de> wrote:
> Would it be possible, that fr only validates the certificates and 
> proxies the CN as username to a central fr, that has  the complete user db?
> If so, how could it be achieved?

  That's a bit awkward, because the proxied requests won't have any
authentication data.

  A different solution would be to proxy *all* requests centrally, or
copy some of the database information from the central site to the
remote sites.

  Alan DeKok.