"Desmond Rivet" <[EMAIL PROTECTED]> wrote:
> The Expiration attribute seems to be the way to go, but my brief look at 
> gettime() in valuepair.c seems to indicate that the attribute value only has 
> a day of resolution. Is this correct? Can it be changed without modifying 
> the code?

  Nope.  But the source code changes should be ~40 lines or so.

> Notice that "rlm_sql:  check items" does not mention a User-Password 
> attribute, because there isn't any. the eap authentication module should 
> complain about this but does not. How can it send an Access-Accept if it has 
> no password?

  I'm not sure.  It doesn't look good to me.

  If this is in 0.9, what MAY be happening is that the EAP module is
"remembering" a previous request, and using the old password for the
new request.

  Try the CVS snapshot from tomorrow.  The EAP module has been
massively re-written since 0.9, and that problem should NOT be
occuring.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to