Certificate username check

[mik0s]

Hello.

I can check certificate username for auth? Now any user can use one certificate from another user.
I set realm policy for check O=MYCOMPANY. Maybe I can check field Subject DN.CN = LDAP DN.CN ?

Thank you.

[zanyterp]

Are you doing only certificate authentication or are you also doing LDAP?

[mspiers]

Does https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB24522 help?
It covers configuration that restricts users to authenticating against AD/LDAP with the username (CN) on the certificate they present.

[mik0s]

Thank you! This is help for me, I think)