How to combine authentication methods?

2005-03-09 Thread Manuel Schmitz
Hello, I'm running a cert-based authentication (EAP-PEAP) in my net here. How can I configure freeradius to look if the cert's common name is in the users file (and deny access on no match) ? --manuel -- SMS bei wichtigen e-mails und Ihre Gedanken sind frei ... Alle Infos zur SMS-Benachrichti

Re: EAP-TLS: "check_cert_cn" dows not work?

2005-03-06 Thread Manuel Schmitz
Thank you for your answers, Mike. > Manuel Schmitz wrote: > > Can I re-enable certs as well (with CRLs)? > > It *can* be done, but it's generally not advised. If you need to > temporarily disable a client, then the more appropriate way would be an > explicit den

Re: EAP-TLS: "check_cert_cn" dows not work?

2005-03-04 Thread Manuel Schmitz
; Michael Griego > Wireless LAN Project Manager > The University of Texas at Dallas > > > > Manuel Schmitz wrote: > > Thank you very much. :-) > > I simply need a way to "turn off" certificates. Is there a possibility > to > > reject single certific

Re: EAP-TLS: "check_cert_cn" dows not work?

2005-03-03 Thread Manuel Schmitz
gt; --- > Michael Griego > Wireless LAN Project Manager > The University of Texas at Dallas > > > > Manuel Schmitz wrote: > > Hello, > > > > as far as I have understood, the "check_cert_cn" switch in > raddb/eap.conf

EAP-TLS: "check_cert_cn" dows not work?

2005-03-03 Thread Manuel Schmitz
reject any request. I am running a WLAN with EAP-TLS authentication and need to "switch off" single certificates. --Manuel Schmitz -- Lassen Sie Ihren Gedanken freien Lauf... z.B. per FreeSMS GMX bietet bis zu 100 FreeSMS/Monat: http://www.gmx.net/de/go/mail - List i