people try to use client certificates, and it generally doesn't work

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index d7200515148ed9e230d24d43bad28dfc5268e77e..6c8f6b4bea8636218780f2a74a82002a78e42480 100644 (file)
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -851,6 +851,10 @@ eap {
                #
                #  in the control items for a request.
                #
+               #  Note that the majority of supplicants do not support using a
+               #  client certificate with EAP-TTLS, so this option is unlikely
+               #  to be usable for most people.
+               #
 #              require_client_cert = yes
        }
 
@@ -974,6 +978,10 @@ eap {
                #
                #  in the control items for a request.
                #
+               #  Note that the majority of supplicants do not support using a
+               #  client certificate with PEAP, so this option is unlikely to
+               #  be usable for most people.
+               #
 #              require_client_cert = yes
        }