I'm not sure either. I think if I configured more than one modules in the "authenticate" section, FreeRADIUS will call each authenticate method sequentially. In this way we can make the following modules to process the value pairs we put in TTLS code.
However, if this does not work, I think we can configure a "pure" TTLS server and a normal FreeRADIUS server. The TTLS server just extract the AVPs, put them into RADIUS packets (maybe in request->proxy?), and forward them to the FreeRADIUS server. I don't know how to write the configuration file, but I think this is possible. regards, Zhou Ping. ----- Original Message ----- From: "Xiong Lu Ying" <[EMAIL PROTECTED]> To: "Zhou Ping" <[EMAIL PROTECTED]> Cc: "Paul Tan Hock Lai" <[EMAIL PROTECTED]> Sent: Thursday, June 26, 2003 4:48 PM Subject: Re: a question about implementing PEAP > Hi, Zhou Ping, > I have looked through the latest Xsupplicant,it just added the patch > ttlsphase2.c > to implement the TTLS without using CHAP module in Xsupplicant again. This > way is different from what we are trying to do in Freeradius. > So I am not sure the way that appending AVPs to Radius Packet will work. > Problem is how to trigger the server to process the message? > I think the way they use is easier to implement? > I would like to hear your oppion. > > Best Regards > Xiong Lu Ying > > Freeradius. > ----- Original Message ----- > From: "Zhou Ping" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, June 26, 2003 3:59 PM > Subject: Re: a question about implementing PEAP > > > > Yes, I'm working on TTLS support for FreeRADIUS, which is almost identical > > to PEAP. I'm also thinking about the same question. I think I should > > extract the AVPs from the TLS packet and append them to the RADIUS > request, > > and some other modules will handle it. I wonder if this is correct and I'm > > reading the code of Xsupplicant for some answer. > > > > regards, > > Zhou Ping. > > > > >From: "Xiong Lu Ying" <[EMAIL PROTECTED]> > > >To: <[EMAIL PROTECTED]> > > >Subject: a question about implementing PEAP > > >Date: Thu, 26 Jun 2003 10:42:37 +0800 > > > > > >Dear Zhou Ping: > > >I am trying to implement PEAP using freeradius, and I know you are doing > > the same thing. > > >Now I have got PEAP part 2 message (eg, EAP/MD5), > > >and how to push these EAP message into radius packet > > >to trigger the server to handle these message? > > >Because freeradius listen to the UDP port to get the Radius packet. > > >Do you have any idea? > > > > > >Thank you in advance! > > > > > >Best Regards, > > >Xiong Lu Ying > > > > _________________________________________________________________ > > 免费下载 MSN Explorer: http://explorer.msn.com/lccn/ > > > > ?b??叉??{?叉??y'???0龙???(???呵?f
