I try to use FreeRADIUS for building 801.1X EAP-TLS authorization. I want to use only computer certificates (not user ones) on WinXP. such certificates contains FQDN of client in `commonName' field.

But WinXP/SP2 sent `User-Name' in such case as `host/FQDN'. And checking of commonName fails.

How can re-map such `User-Names'? I've tried to create realm with LOCAL mapping, but it doesn't help much :(

It seems, that eap-tls `xlat' user-name before check, but xlat is not well-documented :(

--
// Lev Serebryakov

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to