This leads me to a quick question about where we are for EAP and where we're going. I still have an item on my Todo list to fix rlm_eap and the submodules to use RLM return codes, so, for example, an EAP subtype could return RLM_HANDLED to indicate an incoming packet should just be dropped. Is that one of the changes in the CVS? If not, I'm still not sure when I'll get to it, but we need that to meet the EAP-SIM spec. We're running with 0.8.1 now, but if I need to make this change, I assume I should do it against 0.9.0? If the CVS has already changed, maybe I should wait till the next release? I prefer to do my work on top of a released version, since it will need to go to our customers.
Regards, Dave
Alan DeKok wrote:
pankaj Goel <[EMAIL PROTECTED]> wrote:
I configured rlm_eap-peap module and used the code from eap-tls module to get till the first phase of peap. I have been using freeradius 0.8.1. Are you talking about the latest snapshot from CVS regarding the changes ?
Yes.
The issue is that the server CANNOT do TTLS or PEAP in 0.8.1, or in 0.9.0. Those two protocols require additional changes to the server core, which are ONLY in the latest CVS snapshot.
I've also changed a large portion of the rlm_eap module, to make it simpler & better. This work isn't strictly required for TTLS or PEAP, but it does make it MUCH easier to understand the EAP module.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
