I have just committed a new module: rlm_eap2.  It uses the hostap
libraries to implement EAP.  This means that FreeRADIUS now has two
independent EAP modules, and can support a wider range of EAP types.

  There are some limitations:

  * The rlm_eap2 module is experimental, and requires some Makefile
changes on both hostap && rlm_eap2 to build.

  * The inner tunneled sessions for PEAP and TTLS are *not* run through
a virtual server, as with rlm_eap.  This can be fixed before 2.0.

  * The inner tunneled sessions CANNOT be proxied (see above for why)

  * the eap types in use CANNOT be controlled by the server.  This can
be fixed before 2.0.


  The goal is to enable a wider range of EAP types to be used in FreeRADIUS.

  I will try to put together some upstream patches for hostap which will
make it easier for EAP servers to selectively control which types they
choose to implement.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to