https://community.extremenetworks.com/t5/extremewireless-wing/tls-certificate-fields-for-authentication/m-p/60363#M5287 <P>Hello,<BR />we want to use certificate attributes as described in&nbsp;<A href="https://extremeportal.force.com/ExtrArticleDetail?an=000064090" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000064090</A> for rules in the NAC. According to the article, there are only the listed attributes available. As we have to consider multiple different clients where certificates are generated automatically by the corresponding management systems, we are quite limited by the attributes we can choose from. What I am missing in the list are the "default" attributes like "localityName" or "organizationalUnitName" etc. The article refers to the "dictionary.freeradius.internal" dictionary, but AFAIK there is something like a default dictionary in freeradius which is also used. Does anyone have any information on this? Perhaps the syntax of the "default" attributes, if available? Any help very appreciated!</P> Thu, 05 Oct 2017 18:28:00 GMT Leonhard_Kurz 2017-10-05T18:28:00Z https://community.extremenetworks.com/t5/extremewireless-wing/tls-certificate-fields-for-authentication/m-p/60363#M5287 <P>Hello,<BR />we want to use certificate attributes as described in&nbsp;<A href="https://extremeportal.force.com/ExtrArticleDetail?an=000064090" target="_blank" rel="nofollow noreferrer noopener">https://extremeportal.force.com/ExtrArticleDetail?an=000064090</A> for rules in the NAC. According to the article, there are only the listed attributes available. As we have to consider multiple different clients where certificates are generated automatically by the corresponding management systems, we are quite limited by the attributes we can choose from. What I am missing in the list are the "default" attributes like "localityName" or "organizationalUnitName" etc. The article refers to the "dictionary.freeradius.internal" dictionary, but AFAIK there is something like a default dictionary in freeradius which is also used. Does anyone have any information on this? Perhaps the syntax of the "default" attributes, if available? Any help very appreciated!</P> Thu, 05 Oct 2017 18:28:00 GMT https://community.extremenetworks.com/t5/extremewireless-wing/tls-certificate-fields-for-authentication/m-p/60363#M5287 Leonhard_Kurz 2017-10-05T18:28:00Z