Re: EAP

2012-12-13 Thread Phil Mayers
On 13/12/12 15:55, David Peterson wrote: I am troubleshooting potential issues on a WiMax system. Typically we have the FR server on a LAN link but some customers have WAN links. My thought is disconnects on a re-auth session causing outages. I guess it might be WAN RTT. To an extent, it dep

Re: EAP

2012-12-13 Thread Phil Mayers
On 13/12/12 15:43, David Peterson wrote: Hmm so if say the wireless inserted 55-65ms of latency and we have another 50ms of WAN latency it could cause some real issues with EAP. It shouldn't cause issues - but you will observe the latency (as well clients when authenticating). Most EAP timer

RE: EAP

2012-12-13 Thread David Peterson
I am troubleshooting potential issues on a WiMax system. Typically we have the FR server on a LAN link but some customers have WAN links. My thought is disconnects on a re-auth session causing outages. David -Original Message- From: Phil Mayers [mailto:p.may...@imperial.ac.uk] Sent: T

Re: EAP

2012-12-13 Thread Alan Buxey
Hi, >I wanted to ping the Eduroam people about EAP over WAN links.  Are there >considerations that can cause connectivity issues that I should be >examining?  depends on how fast your authentication backend is and what your NAS timers are set to. if your backend takes around 1 second

RE: EAP

2012-12-13 Thread David Peterson
Hmm so if say the wireless inserted 55-65ms of latency and we have another 50ms of WAN latency it could cause some real issues with EAP. David -Original Message- From: Phil Mayers [mailto:p.may...@imperial.ac.uk] Sent: Thursday, December 13, 2012 10:36 AM To: David Peterson-WirelessConne

EAP

2012-12-13 Thread David Peterson
I wanted to ping the Eduroam people about EAP over WAN links. Are there considerations that can cause connectivity issues that I should be examining? David <>- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP

2012-12-13 Thread Phil Mayers
On 13/12/12 15:22, David Peterson wrote: I wanted to ping the Eduroam people about EAP over WAN links. Are there considerations that can cause connectivity issues that I should be examining? Well... maybe. EAP is lockstep, so round-trip time is a factor - if your RTT is 100ms and your EAP ex

Re: share information between authorize and authenticate sections (rlm_perl & rlm_python)

2012-12-13 Thread laurent . feron
Yes, just found this attribute. Thanks. Works well with Perl :), but not with Python :( - Mail original - De: "Phil Mayers" À: freeradius-users@lists.freeradius.org Envoyé: Jeudi 13 Décembre 2012 13:05:23 Objet: Re: share information between authorize and authenticate sections (r

Re: refowarding the radius request when authentication fails

2012-12-13 Thread laurent . feron
ok. Maybe within a rlm_perl script i recreate a radius packet to send it to another radius server. Thanks. I will try... - Mail original - De: "Phil Mayers" À: freeradius-users@lists.freeradius.org Envoyé: Jeudi 13 Décembre 2012 13:03:54 Objet: Re: refowarding the radius request when au

Re: share information between authorize and authenticate sections (rlm_perl & rlm_python)

2012-12-13 Thread Phil Mayers
On 12/12/12 22:04, laurent.fe...@free.fr wrote: Hello, If someone can advise me... How to share information between the authorize() function and the authenticate() function within a perl or python script ? Just set an attribute: authorize { update request { Tmp-String-0 := "%{some:expa

Re: refowarding the radius request when authentication fails

2012-12-13 Thread Phil Mayers
On 12/12/12 22:14, laurent.fe...@free.fr wrote: Hello, in the authentication step, i try several authentication against otp server, but if all are failed if the user is not know, i would like to re forward the radius request to another radius server. The server can't do that, because it doesn'

Re: share information between authorize and authenticate sections (rlm_perl & rlm_python)

2012-12-13 Thread Alan Buxey
Hi, > in perl, i could write some new attributes in RAD_CHECK ??, then > authenticate() will access them. > in python, attributes are read only, so i cannot use them to pass information > to authenticate(). > A simple database, like redis, could be a solution by adding info with the id > of the