Hi Alan Am 11.08.11 23:13, schrieb Alan DeKok: > The TLS-Client-Cert-Subject is empty. You will need to check for EAP-TLS: > > if ((EAP-Type == EAP-TLS) && \ > (%{TLS-Client-Cert-Subject}" !~ /\/O=MyCompany\//)) { > ... Thank you very much. This works great. Regards, Daniel