> So, how can I get in logs exactly common names? As I understand, only way to do it is check_cert_cn = %{User-Name} in eap.conf? -- Vladimir Vassiliev <vova at edu.yar.ru>