Modifying EAP Messages

Alan DeKok aland at deployingradius.com
Mon Mar 16 20:26:00 CET 2009


Enrique de la Hoz wrote:
> We are trying to develop a module to make possible to add extra
> information to EAP Messages.

  Huh?  Why would you ever do that?

  The EAP protocol is well defined.  Adding "extra" information to it is
like adding "extra" data to IP packets.  It will be ignored... at best.

> We are employing rlm_perlo module. Up to
> now, we have been able to add new EAP-Message attributes to the RADIUS
> response packets but we cannot figure out how to modify the current
> EAP-Message already addedd. It is assumed (from RFC 3579) that multiple
> EAP Message attributes will be concatenated to form a single EAP Packet
> but the thing is that we do not receive the added information in our
> supplicant.
> 
> Two questions arise:
>  1) Is it possible to modify EAP-Message attributes from perl modules?
>  2) If not, should we go through a per EAP-athentication method C source
> code modification?

  What are you trying to do, and why?

  Alan DeKok.



More information about the Freeradius-Users mailing list