W dniu 10-01-20 08:52, Alan DeKok pisze:
Maja Wolniewicz wrote:A few changes in FreeRADIUS are needed to provide some configuration variables to the hostap EAP library.Could you send the changes as a patch? That way we can apply them to the server, and make it easier for everyone else.
I attach the patch. Maja
The biggest problem is that this solution works only with eapol_test client. In real world, on the wireless network we managed to authenticate using EAP-FAST on FreeRADIUS only with anonymous PAC provisioning, because EAP fragmentation seems to be not handled.I think that's an issue with the hostap library. Maybe there's an API for FreeRADIUS to set MTU for the library. (I haven't looked recently) Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Maja Gorecka-Wolniewicz m...@umk.pl PGP key: http://www.home.umk.pl/~mgw/pgp_pub_key.asc Uczelniane Centrum Information& Communication Informatyczne Technology Centre Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574
freeradius-fast.patch.gz
Description: GNU Zip compressed data
smime.p7s
Description: S/MIME Cryptographic Signature
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html