Bind username to certificate

[Alan DeKok]

Marco Londero wrote:
> Hi folks,
> 
> is it possible to bind a SSL certificate (used for EAP-TLS auth) to a
> specific LDAP user instead of using user's LDAP-stored password?

  See raddb/sites-available/default.  Look for "tls"

  You will need to write your own policies to enforce this.  FreeRADIUS
provides the pieces, you need to put them together.

  Alan DeKok.