Re: EAP subtype as authorization

2003-11-07 Thread Kostas Kalevras
On Fri, 7 Nov 2003, Artur Hecker wrote: hi so what value would i set the EAP-Type attribute to? See the dictionary file for the values for the EAP-Type attribute no, i think we didn't understand each other. you are talking about Auth-Type := EAP which is set automatically by the EAP

Re: EAP subtype as authorization

2003-11-07 Thread Artur Hecker
hi kostas We clearly aren't understanding each other :-) And you didn't read what i asked you to, because you would find out it's exactly what you want. Evidently i _wasn't_ talking about Auth-Type but about EAP-Type. So please read the dictionary file for the values for EAP-Type. ok, sorry, i

Re: EAP subtype as authorization

2003-11-07 Thread Artur Hecker
hi kostas :) We clearly aren't understanding each other :-) And you didn't read what i asked you to, because you would find out it's exactly what you want. Evidently i _wasn't_ talking about Auth-Type but about EAP-Type. So please read the dictionary file for the values for EAP-Type. ok, sorry,

Re: EAP subtype as authorization

2003-11-07 Thread Alan DeKok
Kostas Kalevras [EMAIL PROTECTED] wrote: ahem... you've sent a patch? where? :) Hmm, typical :-) Ok included It's probably easier just to assume the following: - ask for default eap type, but allow the user to NAK, and request another - if EAP-Type is set to some value, require

EAP subtype as authorization

2003-11-06 Thread Artur Hecker
hi people do i ignore something or am i right in the assumption that it is currently not possible to define different EAP authentication methods on a per-user basis with the provided onboard configuration? (would be a nice feature to have john use PEAP during jack has to go for pure TLS, for

Re: EAP subtype as authorization

2003-11-06 Thread Kostas Kalevras
On Thu, 6 Nov 2003, Artur Hecker wrote: hi people do i ignore something or am i right in the assumption that it is currently not possible to define different EAP authentication methods on a per-user basis with the provided onboard configuration? (would be a nice feature to have john use

Re: EAP subtype as authorization

2003-11-06 Thread Artur Hecker
hi kostas So you only need to set the EAP-Type attribute in the authorize section on a per user basis and i think it should work. so what value would i set the EAP-Type attribute to? i don't want the user X just to grab the EAP-method Y and freeradius to use it if it finds it in user's

Re: EAP subtype as authorization

2003-11-06 Thread Kostas Kalevras
On Thu, 6 Nov 2003, Artur Hecker wrote: hi kostas So you only need to set the EAP-Type attribute in the authorize section on a per user basis and i think it should work. so what value would i set the EAP-Type attribute to? See the dictionary file for the values for the EAP-Type

Re: EAP subtype as authorization

2003-11-06 Thread Artur Hecker
hi so what value would i set the EAP-Type attribute to? See the dictionary file for the values for the EAP-Type attribute no, i think we didn't understand each other. you are talking about Auth-Type := EAP which is set automatically by the EAP module in the authorize section. that's