"Vic Abell" <[EMAIL PROTECTED]> wrote:
> I don't think someone should be authorized before the claimed identity
> has been authenticated. Otherwise authorization might be given to
> someone falsely claiming an identity.
Nonsense. The authorization isn't returned to the caller until
after they've been authenticated.
Vic: Hi, I'm Vic Abell, here for a conference
Secretary: OK... we've got a file full of stuff for you.
Hmm... a post-it not on the file says we need to see your
drivers licence.
Vic 1: Supplies license
Secretary: OK, here's the file of conference information. I'll keep
the post-it note.
Vic 2: Doesn't supply license.
Secretary: Stuffs the file back into a box, and tells you to go
away.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
