Re: TTLS authentication slow

[A.L.M.Buxey@lboro.ac.uk]

Hi,

> 	eap {
> 		default_eap_type = ttls
> 
> 		tls {
> 			private_key_file = /etc/raddb/server.tld.pem
> 			certificate_file = /etc/raddb/server.tld.pem
> 			CA_file = /etc/raddb/server.tld.pem
> 			dh_file = /etc/raddb/dh
> 			random_file = /etc/raddb/random
> 			fragment_size = 1024
> 			include_length = yes
> 		}
> 
> 		ttls {
> 		}
> 	}

whoa. you seem to have stripped out all the stuff from the ttls stanza.

FreeRADIUS 2.0 can do EAP in a quicker time due to handling the packets
differently.... but even 1.1.7 can do an EAP-TTLS in sub-second speed
even using LDAP/AD/mysql and perl.....

alan