Hi, > I dont like the thought of having weak passwords in LDAP at all and on > the other hand TLS on radius clients can also not be made 100% secure. EAP-TLS can... EAP-TTLS not so. alan