Authenticate with both Certificate and password

[Alan DeKok]

On Jun 9, 2016, at 8:03 AM, jan hugo prins <jhp at jhprins.org> wrote:
> 
> What I mean is, how do I force it on the Radius server that you can only
> authenticate using a combination of both certificate and username /
> password.

  You deny EAP-TLS, which is the only EAP method with certificates, but no password.

 	if ((User-Name == "bob") && (EAP-Type == EAP-TLS)) {
		reject
	}