Phil Mayers p.mayers at imperial.ac.uk
Fri May 27 17:51:16 CEST 2011


On 27/05/11 16:41, Fajar A. Nugraha wrote:

> Phil, Zeev asked about EAP-TTLS, and you said "you might be able to
> just force-accept the inner auth, because that's usually just PAP (no
> challenge / response)". But before that you also said "No, can't be
> done. EAP is a challenge/response protocol".
>
> Are you perhaps thinking that Zeev wrote EAP-MSCHAP instead of EAP-TTLS?
>

No. I understood his post just fine. I am differentiating between the 
outer auth and the inner auth.

You cannot just force an "Accept" for EAP-TTLS (the outer auth)

You can possibly force an "Accept" for inner auth method, if it's PAP.



More information about the Freeradius-Users mailing list