Re: MAC+EAP authentication

2005-06-14 Thread Jefri bin Dahari
. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, June 14, 2005 01:03 Subject: Re: MAC+EAP authentication Jefri bin Dahari [EMAIL PROTECTED] wrote: I plan to implement simultaneous MAC+EAP

Re: MAC+EAP authentication

2005-06-14 Thread Alan DeKok
Artur Hecker [EMAIL PROTECTED] wrote: implementing EAP or MAC authentication, meaning that one of both would work, is a huge security hole and requiring both is useless since EAP authentication implicitly filters away everything unauthenticated... Doing *both* ensures that known users only

Re: MAC+EAP authentication

2005-06-14 Thread Alan DeKok
Jefri bin Dahari [EMAIL PROTECTED] wrote: authentication. On client side (Centrino/Windows XP), I set as mentioned in the HOW-TO for EAP-TLS. On Freeradius, I only see EAP authentication but no MAC authentication. Am I missing something? Please help. Read your NAS documentation. There's

Re: MAC+EAP authentication

2005-06-14 Thread Artur Hecker
Alan, well, unfortunately not really. and most importantly: it does not assure the users use the known SOFTware to access the net. imho, hardware has never ever represented a problem so far. ciao artur On 6/14/05, Alan DeKok [EMAIL PROTECTED] wrote: Artur Hecker [EMAIL PROTECTED] wrote:

MAC+EAP authentication

2005-06-13 Thread Jefri bin Dahari
Hi, I plan to implement simultaneous MAC+EAP authentication for my wireless users. From my observation, Freeradius can only do either MAC or EAP but not MAC and EAP authentication. Can somebody gives me some hints on how to do that? Thanks. - List info/subscribe/unsubscribe? See http

Re: MAC+EAP authentication

2005-06-13 Thread Alexandre Coninx
On Mon, Jun 13, 2005, Jefri bin Dahari wrote: Hi, I plan to implement simultaneous MAC+EAP authentication for my wireless users. From my observation, Freeradius can only do either MAC or EAP but not MAC and EAP authentication. Can somebody gives me some hints on how to do that? I check

Re: MAC+EAP authentication

2005-06-13 Thread Alan DeKok
Jefri bin Dahari [EMAIL PROTECTED] wrote: I plan to implement simultaneous MAC+EAP authentication for my wireless users. From my observation, Freeradius can only do either MAC or EAP but not MAC and EAP authentication. Can somebody gives me some hints on how to do that? It can do both

Re: MAC+EAP authentication

2005-06-13 Thread Artur Hecker
be necessary for current WiFi phones, etc., please be aware that under linux you can actually change the MAC address with one command...) ciao artur On 6/13/05, Alan DeKok [EMAIL PROTECTED] wrote: Jefri bin Dahari [EMAIL PROTECTED] wrote: I plan to implement simultaneous MAC+EAP authentication