Re: [RADIATOR] EAP PEAP Challenges

2016-04-20 Thread Heikki Vatiainen
On 20.04.2016 05:06, Ullfig, Roberto Alfredo wrote: > cisco-avpair = "audit-session-id=0a01e50b000190dd5711917d" > > The session-id here is the same for an entire sequence of challenge-responses? Yes, I think it's the same. Also, it should be included with the subsequent accounting requests,

Re: [RADIATOR] EAP PEAP Challenges

2016-04-19 Thread Ullfig, Roberto Alfredo
From: Hugh Irvine [mailto:h...@open.com.au] Sent: Tuesday, April 12, 2016 7:43 PM To: Ullfig, Roberto Alfredo; Alan Buxey Cc: radiator@open.com.au Subject: Re: [RADIATOR] EAP PEAP Challenges Hello Roberto - Welcome to the wonderful world of EAP. Note that EAP is essentially a stateful encrypted

Re: [RADIATOR] EAP PEAP Challenges

2016-04-12 Thread Hugh Irvine
Hello Roberto - Welcome to the wonderful world of EAP. Note that EAP is essentially a stateful encrypted TCP tunnel, over RADIUS, over UDP, hence the large number of packets back and forth for a single authentication. I wonder what substance they were abusing? regards Hugh > On 12 Apr

Re: [RADIATOR] EAP PEAP Challenges

2016-04-12 Thread A . L . M . Buxey
Hi, >Is there a paper somewhere which discusses EAP PEAP Challenges? I'm >debugging a new controller's access to radiator and finding that a working >auth requires 11 udp packets each way and I don't understand why. What >info is being passed? documented in the RFC and on

Re: [RADIATOR] EAP PEAP Challenges

2016-04-12 Thread Ullfig, Roberto Alfredo
...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Ullfig, Roberto Alfredo Sent: Tuesday, April 12, 2016 8:39 AM To: radiator@open.com.au Subject: Re: [RADIATOR] EAP PEAP Challenges Are all the challenges independent of each other? I can't find anything in the debug log that ties

Re: [RADIATOR] EAP PEAP Challenges

2016-04-12 Thread Ullfig, Roberto Alfredo
Alfredo Sent: Tuesday, April 12, 2016 8:37 AM To: radiator@open.com.au Subject: [RADIATOR] EAP PEAP Challenges Is there a paper somewhere which discusses EAP PEAP Challenges? I'm debugging a new controller's access to radiator and finding that a working auth requires 11 udp packets each way and I

[RADIATOR] EAP PEAP Challenges

2016-04-12 Thread Ullfig, Roberto Alfredo
Is there a paper somewhere which discusses EAP PEAP Challenges? I'm debugging a new controller's access to radiator and finding that a working auth requires 11 udp packets each way and I don't understand why. What info is being passed? --- Roberto Ullfig - rull...@uic.edu ACCC Research