> Laurent Butti wrote:
>
> Hello,
>
> Does FreeRadius support (or will support) proxying for EAP
> authentication methods (MD5/TLS), with a kind of user@realm in EAP
> Response Identity which should be used in order to delegate
> authentication to a 3rd party AAA ?
>
EAP Proxying is supported if the
1. User-Name attribute is present in the Access-Request.
2. User-Name attribute is not present then
if eap is present as in the authorize block
as one of the first modules.
ie
authorize {
eap
... all other modules.
}
What this does is User-Name attribute is created
from EAP-Identity response, if it is not present.
The other modules should take care of proxying.
-Raghu
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
