Re: [WIRELESS-LAN] 802.1X accounting, PEAP outer identity

2006-07-14 Thread Jeff Wolfe

Julian Y. Koh wrote:

At 20:15 -0500 06/02/2006, Julian Y. Koh wrote:



Now we find out from Funk that their fix in 5.4 still isn't working like they
wanted, with a final fix scheduled for Q4 2006.  This is obviously totally
not cool, and will probably force us to jumpstart our freeradius efforts.
The pain in the butt is that we just did our official rollout of the
802.1X/WPA2 wireless this week, and all the docs point to verifying the cert
of the SBR server.  Not an insurmountable deal to fix, but it looks bad if we
have to switch.  OTOH, switching now will be the best time to do it before we
get a lot of people using the service, and it would be better than having
people masquerade as other users in the accounting records


You may also want to consider Radiator. I've found the support from the 
OSC folks to be much more friendly that some of the folks on the 
freeradius list.


We use it and it's very flexible. We've even dealt with most of the 
issues that you raise..



-JEff

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] 802.1X accounting, PEAP outer identity

2006-07-14 Thread Michael Griego

On Jul 14, 2006, at 4:23 PM, Jeff Wolfe wrote:

You may also want to consider Radiator. I've found the support from  
the OSC folks to be much more friendly that some of the folks on  
the freeradius list.



Heh...  Yeah, Alan (DeKok) can come off a bit harsh sometimes.  You  
have to understand, though, that he and the rest of the support folks  
(myself included from time to time) deal with the same questions  
every single day from people who don't read through the list archives  
to see if their questions have been answered in the past.  Since  
FreeRADIUS is one of a very few free RADIUS servers that support EAP,  
lots of people try to use it for this without having any clue what  
they're doing.  Its the same issue as with lots of other open source  
projects.  Because the support is free as well as the software,  
people are expected to do their homework and ask intelligent  
questions.  Unfortunately this doesn't happen in many cases.  There  
*are* companies, though, that do offer support contracts for  
FreeRADIUS IIRC.



--Mike

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

smime.p7s
Description: S/MIME cryptographic signature