CUI in TLS

[Panagiotis Georgopoulos]

Hello all,

 

                I am trying to implement CUI in EAP-TLS and I would like to get a handle
on the CN of the client's certificate in my default. Basically I need to use the CN of the
certificate, since there is no User-Name attribute in EAP-TLS.

 

What module handles the TLS certificates' authentication? How can I get the CN in my
post_auth and accounting stanzas in my default? 

 

                On a similar note, why do we set the lastaccounting='0000-00-00
00:00:00',in the post_authquery in the cui.conf?

 

                Incidentally, if we need full IPv6 support the clientipaddress field in
the cui table and the equivalent fields in radacct should be of length 39 and not 15.

 

                Cheers,

                Panos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20111028/ae7f76c8/attachment.html>