On 03/01/2012 10:26 AM, Rich Graves wrote:
>>> $user_name. I hope that's the Inner-Tunnel identity, not outer-tunnel? I'll 
>>> find out shortly...
>>
>>> I'm not sure but I think it's Outer actually since we run post-auth in
>>> the outer tunnel (NAS sees outer not inner). After my many many `radius
>>> -X` sessions, I've yet to see a different User-Name when comparing inner
>>> and outer tunnels.
>
> I have some higher-level issues right now (support case on the way), but you 
> should take 5 minutes to test. I'm not sure about Canadian universities, but 
> anonymous outer identities are strongly recommended by most European eduroam 
> affiliates.
>

This issue has been confirmed. It will be handled and fixed for our next 
release. Details won't be public until a fix is released due to the 
security nature of the issue.

Users who are not assigning VLANs based on any component of the 
User-Name should not worry.

-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to