> Sure, some sort of client authentication is technically required, but I think you can configure the authentication server to accept any authentication without compromising the link security.

It this supported anywhere? Hence the mention of HS2.0 and my jab at Jouni. (In Jouni's defense, hostapd has made really good progress on this.)

> Or you could auto-provision users on first login or something like that depending on what sort of access you want to give.

This may be supported by Hotspot 2.0 Release 2 (IEEE 802.11u) Online Sign Up (OSU) Server-Only Authenticated L2 Encryption Network (OSEN). I would like to know if OSEN is usable for this scenario.