hi sylvain

i have to admit that i don't really understand the first part of your
question. but, in the case you are using EAP/MD5 try to read the FAQ
under http://www.freeradius.org/doc/EAP-MD5.html and look for
Reply-Message. Could it be this kind of problem?

for the second part, it's interesting - i didn't try it but, as alan, i
asked myself if it is possible some time ago and i promptly came up with
a solution which i'm not sure about.

Alan: what do you think, if freeradius assigned an ip-address to the
user in a corresponding radius attribute and the client (AP) would use
it for the client's DHCP/BOOTP relay which then would emit an DHCPOFFER
message, could it work? I'm not an expert in BOOTP/DHCP, but do you
think something like this would be possible?


ciao
artur



Alan DeKok wrote:
> 
> =?iso-8859-1?q?Sylvain=20Masnada?= <[EMAIL PROTECTED]> wrote:
> > I'd like to know why the "reply-message" attribute is sent by
> > freeradius in a access-reject packet.  I use this attribute to
> > welcome people who connected themselves on my wireless network. But
> > with xsupplicant, this access-reject disconnects my user, who
> > reconnects immediately and is disconnected and reconnected and ...
> 
>   I don't think that the Reply-Message has anything to do with it.
> 
>   If the user is rejected, they can try again immediately.  After some
> number of retries, the AP will deny them access.  See the AP
> configuration for details.
> 
> > I'd like to know if my AP which is a cisco AP350 can cause me
> > troubles when I try to assign an ip to the users.
> 
>   So far as I know, it can't be done.  The users are authenticating to
> the AP (and then FreeRADIUS) through the EAP protocol, which doesn't
> support setting the IP address.
> 
>   Alan DeKok.
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Artur Hecker
artur[at]hecker.info

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to