example of Identity server infrastructure (both certificates and RADIUS ... possible to enhance RADIUS with fips186-2 ecdsa digital signature authentication).
http://wwws.sun.com/software/products/identity_srvr/ds_identity.html LDAP userid/password X.509v3 digital certificates RADIUS Public service provider
