Artur Hecker <[EMAIL PROTECTED]> wrote:
> implementing EAP or MAC authentication, meaning that one of both would
> work, is a huge security hole and requiring both is useless since EAP
> authentication implicitly filters away everything unauthenticated...

  Doing *both* ensures that known users only use known hardware to
access the net.  Sort of.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to