On 2/26/13 1:48 PM, Arran Cudbard-Bell wrote:
Hi Aaron,
Sorry for the late reponse to this thread (I'm catching up on
backlogged mail).
I'm not sure if you got any volunteers, but we'd be very interested
in testing this out (with MIT krb5 at least). Thanks for doing this
work.
Hi Shumon,
Be
eeradius.org, and send feedback to either the
> list or me directly.
>
> Thanks,
> Arran
> **
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
>
--
Shumon Huque
University of Pennsylvania.
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
isable the cache to rlm_krb5, this will be
> available in 2.2.0, which should be released ~10/09/12.
>
> You will need to add 'cache = no' to your existing krb5 configuration file.
>
> In what will become 3.0 this is already set in the default configuration file.
>
On Thu, Sep 06, 2012 at 01:19:11PM -0400, Colantuoni, Robert wrote:
> > -Original Message-
> > From: The EDUCAUSE Wireless Issues Constituent Group Listserv
> > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Shumon Huque
> > Sent: Thursday, September
7;ll have our RADIUS ops folks get our numbers, but I want to make
sure we're measuring the same thing. We use syslog and customized
log entries, so
--
Shumon Huque
University of Pennsylvania.
**
Participation and subscription information for this EDUCAUSE Constituent Group
disc
(src/main/connection.c). rlm_rest, rlm_sql and rlm_ldap2 (still in
> development) do this already, and all modules will be updated in time.
>
> If the patches are well formatted, documented, and non-duplicative we'll
> almost certainly accept them.
>
> -Arran
Thanks! I'
, may be
> related to a "slow database", although our Kerberos folks don't see any
> issues on their end.
>
> Any thoughts? Responses to the two questions above would be appreciated
> ... thanks!!
>
> -- Jim Gogan / Univ of North Carolina at Cha
lso some competing methods (involving new versions of
EAP-GSS, IAKERB and GSS-API), but those are even further away from
completion.
So, I agree, still pipe dream :-) But my campus is very interested
in this. And it's good to know that others are also!
---
Shumon Huque
On Wed, Sep 27, 2006 at 11:26:49PM -0500, Frank Bulk wrote:
> Shumon:
>
> Vendors have bandied about different authentication rates for RADIUS
> servers. What kinds of rates are you seeing, 50 auths/sec reasonable?
>
> Frank
Hmm, I think that any quoted numbers would have to be accompanied
by
Fascinating discussion .. thanks for all the comments and
suggestions.
Clearly AP transitions in an authenticated WLAN are very
costly. We'll continue tuning the AP deployment to see if
we can minimize them (as Julian is doing on his campus). But
judging from this thread, a large part of the pro
On Wed, Sep 27, 2006 at 04:49:54PM -0500, Michael Griego wrote:
> On Sep 27, 2006, at 3:15 PM, Shumon Huque wrote:
>
> >Is frequent reassociation the normal behavior in a dense
> >deployment of APs? I can understand that it might be for
> >highly mobile stations like wirel
On Wed, Sep 27, 2006 at 03:41:23PM -0500, Julian Y. Koh wrote:
>
> This is exactly the problem that I referred to in my recent post of 9/18
> ("More fun with RADIUS"). We are working on adjusting the power levels and
> channel assignments of the various APs in the problem areas to cut down the
>
ical endstations support this.
TLS session resumption will probably help a bit also (if supported).
We use cisco aironet 1200/1100 access points. The clients are
mostly PCs running SecureW2, Macs running with the built-in
EAP-TTLS/802.1x support in Mac OS X, and a smaller number of
Linux machines.
Than
years ago, and
suggested a way to fix this. I also submitted an alternate
module later on which does not have this problem - it's tucked
away somewhere in the "goodies" section of the distribution.
(Incidentally, until recently, the Kerberos module in the
freeradius distribution
urrently have any good alternatives for
802.1X/802.11i.
We use Radiator (http://www.open.com.au/radiator/), for which we've
written our own Kerberos password verification module.
I'm also interested in finding out what the other Kerberos schools
are doing.
---
Shumon Huque
15 matches
Mail list logo
