CUI in TLS

[Alan DeKok]

Panagiotis Georgopoulos wrote:
>                 I am trying to implement CUI in EAP-TLS and I would like
> to get a handle on the CN of the client’s certificate in my default.
> Basically I need to use the CN of the certificate, since there is no
> User-Name attribute in EAP-TLS.

  Read raddb/sites-available/default.  Look for TLS.

> What module handles the TLS certificates’ authentication? How can I get
> the CN in my post_auth 

  See above.

> and accounting stanzas in my default?

  It's impossible.

>                 On a similar note, why do we set the
> lastaccounting='0000-00-00 00:00:00',in the post_authquery in the cui.conf?

  Because there was no accounting packet.

>                 Incidentally, if we need full IPv6 support the
> clientipaddress field in the cui table and the equivalent fields in
> radacct should be of length 39 and not 15.

  Sure.  Send a patch.

  Alan DeKok.