<html><HEAD><LINK media=all href="static/deg/css/wysiwyg.css" type=text/css rel=stylesheet>
<META content="MSHTML 6.00.2900.3243" name=GENERATOR></HEAD>
<BODY>
<P>The defacto "industry standard" for returning 802.11i encryption keys to a Wireless AP is via those Microsoft VSAs.</P>
<P>Ridiculous, but that's the way it is.</P>
<P>Note: This would be another exception case if someone was building a RADIUS server or proxy that filtered attributes based on Vendor-Id.</P>
<P>Dave.</P>
<P> </P>
<P>Feb 15, 2008 12:37:45 PM, freeradius-users@lists.freeradius.org wrote:<BR></P>
<BLOCKQUOTE style="BORDER-LEFT: rgb(102,153,204) 3px solid">
<P>According to A.L.M.Buxey@lboro.ac.uk:<BR>> <BR>...</P>
<P>And just as clearly, I missed that one - yep, thanks.<BR><BR>> > Thu Feb 14 08:41:05 2008 : Debug: rlm_eap_tls: add_reply failed to create attribute MS-MPPE-Recv-Key: Unknown attribute<BR>> > "MS-MPPE-Recv-Key"<BR>> > Thu Feb 14 08:41:05 2008 : Debug: rlm_eap_tls: add_reply failed to create attribute MS-MPPE-Send-Key: Unknown attribute<BR>> > "MS-MPPE-Send-Key"<BR>> <BR>> this aint good. you've got to have these in your TTLS or things arent<BR>> going to work. dictionary files all okay and present and loaded? <BR>> you arent filtering attributes from my quick scan of the config...unless<BR>> you've not copied that part.<BR><BR>I commented out the Micro$loth dictionary since I wasn't using anything<BR>from Redmond in this setup. I will uncomment this and see what happens.<BR><BR>Thanks for all your help.<BR><BR>Regards,<BR><BR>web...<BR><BR>--<BR>William Bulley Email: <A href="mailto:web@umich.edu">web@umich.edu</A></P></BLOCKQUOTE></BODY></html>