1. rfc 2865:
   "If the client receives an Access-Challenge and supports
   challenge/response it MAY display the text message, if any, to the
   user, and then prompt the user for a response.  The client then re-
   submits its original Access-Request with a new request ID, with the
   User-Password Attribute replaced by the response (encrypted), and
   including the State Attribute from the Access-Challenge, if any.
   Only 0 or 1 instances of the State Attribute SHOULD be
   present in a request.  The server can respond to this new Access-
   Request with either an Access-Accept, an Access-Reject, or another
   Access-Challenge."

   Aici nu imi e clara o cheste. Folosirea unui shared secret e optionala ?

2. Ceva success stories cu pam+radius ?   
--
Lorin
I tought i taw a putty cat...I did! I did taw a putty cat!

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui