On Thu, 6 Nov 2003, Artur Hecker wrote: > hi kostas > > > > So you only need to set the EAP-Type attribute in the authorize section on a per > > user basis and i think it should work. > > so what value would i set the EAP-Type attribute to?
See the dictionary file for the values for the EAP-Type attribute > > i don't want the user X just to grab the EAP-method Y and freeradius to > use it if it finds it in user's request. i want freeradius to impose _a_ > certain EAP subtype (and to deny user if it's not the configured one). >From a quick look at the rlm_eap sources i don't think that it is possible. rlm_eap will currently honor an EAP-NAK request from the client and change the EAP-Type to whatever the client requested (if that eap type is supported by rlm_eap). Though it should not be that difficult to add something like a configuration directive (or a radius attribute) enforce_eap_type = yes|no It would actually probably be the patch included (not tested though sorry). > > do i miss something? > > > ciao > artur > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
