Luke has a pam module at https://github.com/PADL/pam_gss
That's enough to start playing with. One big problem you'll run into
with that is that there's not yet a way to do validation of the eap-ttls
certificate with that approach.
That may not actually be a huge deal in the trust-router architecture
though.
|