Re: [Help-gnu-radius] More Authentication Questions

[Sergey Poznyakoff]

Hi Roger,

> I installed a global GNU Radius 1.1 system for a customer and it works
> beautifully. My thanks to everyone on the GNU Radius team.

Thank you :)

> Recently the
> client has expressed interest in wireless, and would like to authenticate
> with EAP-TLS. Does GNU Radius support EAP-TLS or any of 802.1X yet? 

No, currently GNU Radius does not have direct support for EAP-TLS.

> If not, are there plans to add it in the near future?

Yes, these items are in my todo list.

> On a different topic. The client is interested in strong authentication for
> certain applications such as RAS, and has been thinking of combining the
> use of X.509 certificates (something you have) with a UserID/Password
> combination (something you know). Is there any way I can make such a scheme
> work in GNU Radius?

Hmm, it could be possible using extensions... Could you describe the
planned authentication method in more detail?

Regards,
Sergey