Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Jouni Malinen
On Thu, Aug 16, 2007 at 11:39:31AM -0400, Alan DeKok wrote: > Gene Chang (genchang) wrote: > > There is an EAP-FAST implementation on FreeRADIUS from Jouni Malinan. > > If there was, I would have known about it. Yes, and I would assume I would also be aware of this should such a thing have happ

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Hao Zhou \(hzhou\)
There is an EAP-FAST module for EAPHost plug-in, which currently uses three hard coded inner methods, EAP-GTC, EAP-MSCHAPv2 and EAP-TLS. But it can be extended to work with EAPHost supplicant interface to load any inner method registered with EAPHost. Will you have a POTP plug-in soon? The problem

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Alan DeKok
Gene Chang (genchang) wrote: > I think we can all agree that without the help of the market analysts > measuring deployment, comparing our personal perceptions of deployment > is a bit like the five blind men and the elephant. I disagree. Sufficient volumes of data make personal perception stat

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Gene Chang \(genchang\)
Alan, I think we can all agree that without the help of the market analysts measuring deployment, comparing our personal perceptions of deployment is a bit like the five blind men and the elephant. I had the pleasure of helping to bring TTLS into the market. The industry conditions in 2003 was ver

RE: [Emu] focus on deployed protocols

2007-08-16 Thread Bernard Aboba
Thanks Alan, I am glad to see that the evaluation is continuing on the thread.I think both TTLS and EAP-FAST are being widely deployed and both merit consideration. I would agree that the EMU WG should focus on evaluation of existing, deployed EAP methods for the password work item. ___

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Alan DeKok
Gene Chang (genchang) wrote: > There is an EAP-FAST implementation on FreeRADIUS from Jouni Malinan. If there was, I would have known about it. Jouni has added EAP-FAST to hostapd and to wpa_supplicant. While hostapd is a RADIUS server, it's pretty minimal. i.e. not database support, no pol

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Gene Chang \(genchang\)
Dave, There is an EAP-FAST implementation on FreeRADIUS from Jouni Malinan. I don't know how much testing has already gone into the module. I don't know of a client side implementation with APIs for you to integrate the SecurID PAC provisioning. Gene -

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread [EMAIL PROTECTED]
I with Alan on this. I still haven't seen one yet either. But I'd love to see a version of EAP-FAST that I _could_ work with. Meaning; - it runs with something more accessible than the Cisco ACS server, preferably an open source or reference copy. Maybe even an Windows/IAS plugin. - there is

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Alan DeKok
Gene Chang (genchang) wrote: > It is not unusual for developers to be unaware of the breath of the > EAP-FAST market adoption. It has been growing under the radar for a lot > of people since market research firms do not track market share of > different EAP methods. I do rather a bit more than j

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Hannes Tschofenig
Lakshminath Dondeti wrote: Steve, if you would like, I can volunteer cycles to write text. I offered help to the authors a few month ago already and it was rejected. Ciao Hannes ___ Emu mailing list Emu@ietf.org https://www1.ietf.org/mailman/lis

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Gene Chang \(genchang\)
Alan, It is not unusual for developers to be unaware of the breath of the EAP-FAST market adoption. It has been growing under the radar for a lot of people since market research firms do not track market share of different EAP methods. Part of the misperception that EAP-FAST has no market presence

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-16 Thread Alan DeKok
Nancy Winget (ncamwing) wrote: > Thanks Alan, I am glad to see that the evaluation is continuing on the > thread.I think both TTLS and EAP-FAST are being widely deployed and > both merit consideration. I think EAP-FAST has been considered, and has little support. I've never seen an EAP-FAST