TTLS : where to indicate User/Password ?

[Alan DeKok]

Bruno Costacurta wrote:

> I'm trying to configure FreeRadius using TTLS (certificate on server side 
> only) and MySQL. Client is a Linux laptop  using wpa_supplicant.
> I'm in a learning curve regarding 802.1x and FreeRadius and especially TTLS.

  That should work without too much effort.

> Questions:
> - TTLS available authentications are: CHAP,PAP,MS-CHAP,EAP (correct ?)

  Yes.

> - 'Auth-Type=local' means CHAP,PAP and MS-CHAP (correct ?)

  No, just CHAP and PAP.  You shouldn't be using it at all.

> - for the learning curve : 
> --- which is the easiest authentications to start with ?

  PAP.

> --- MySQL will be removed at the first stage to ease debugging / setup of the 
> config (good idea ?)

  Yes.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog