TLS: assigning certificates to username

[Arran Cudbard-Bell]

> On 5 May 2016, at 05:46, Stefan Paetow <Stefan.Paetow at jisc.ac.uk> wrote:
> 
>> I'm sure it is already documented, how to assign certificates to a
>> dedicated username. But I so far didn't find it.
> 
> To my knowledge a TLS certificate will contain a username (a NAI) in
> TLS-Client-Cert-Common-Name.

It *may* contain a CN, and that *may* be an NAI.

No guarantees :)

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160505/ffb6ddf8/attachment.sig>