[EMAIL PROTECTED] wrote: > if possible, we want to fix that in FR 1.1.7.
I don't think there is a need to fix it in 1.1.7. > Which way better do you think ? > - in eaplist_add(), expire the eap_handler same as > eaplist_find(). > or.. > - if it continue to receive EAP Identity over limit number, > no more add to list and ignore. > (if it receive non-identity packet, reset counter). > or other way ... Both. I have committed a fix to CVS head that: - limits the number of sessions (2k is the default) - expires sessions in eaplist_add() Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

