Re: radius authentication via TCP/TLS

Alan Smith via Freeradius-Users <[email protected]> Sun, 12 Jul 2026 10:15:43 +0000 (UTC)
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>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