Hi,
Using EAP/TLS authentication, I noticed that even if the user doesn't exist int the users file, the EAP/TLS authentication still proceeds and the key exchange still occur, access accept is also sent together with MS-MPPE-Recv-Key and MS-MPPE-Send-Key.
rlm_realm: No '@' in User-Name = "lara", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 3
modcall[authorize]: module "files" returns notfound for request 3 --> user lara not found
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 3
modcall[authorize]: module "files" returns notfound for request 3 --> user lara not found
Is there any impact of this on the authentication process ? What's the purpose of checking users file in the EAP/TLS authentication ?
Regards,
Lara
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy de Maupassant -
------------------------------------------------------------------------------------
Do you Yahoo!?
vote.yahoo.com - Register online to vote today!
