Device authentication and User+Device authentication

[Cristian Novac]

CURRENT CONDITIONS:
I'm  currently using FreeRadius server in a system where the server is 
authenticating to the client using a server certificate.
For now, the client is authenticating through username and password.
The method used is EAP-TTLS.
-----------------------
THE TARGET is the client to not only use username and password, but a 
device CERTIFICATE.
-----------------------
I assume that I have to include in the etc/raddb/eap.conf file the LIST 
OF DEVICE ROOT CERTIFICATES.
If so, can you tell me how to do that?
Otherwise, may you tell me what other things I have to do?

I attached my current eap.conf file

Thank you!
Cristian NOVAC.


Alan DeKok wrote:
> Cristian Novac wrote:
>   
>> Could someone tell me what has to be configured to be able to do Device
>> authentication and User+Device authentication.
>>     
>
>   It all depends how you plan on authenticating the devices and users.
> i.e. Which authentication protocols are you using?
>
>   Then.... configure the authentication protocols.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>   

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: eap.conf
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080728/7ac059d1/attachment.ksh>