<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Hi,<br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div><br>Is free radius compliant to RFC 4186? In particular, with respect to section 10.9 which says,<br><br><pre> The EAP server MUST obtain fresh RANDs for each EAP-SIM full<br> authentication exchange. More specifically, the server MUST consider<br> RANDs it included in AT_RAND to be consumed if the server receives an<br> EAP-Response/SIM/Challenge packet with a valid AT_MAC, or an<br> EAP-Response/SIM/Client-Error with the code "insufficient number of<br> challenges" or "RANDs are not fresh". However, in other cases (if<br> the
server does not receive a response to its<br> EAP-Request/SIM/Challenge packet, or if the server receives a<br> response other than the cases listed above), the server does not need<br> to consider the RANDs to be consumed, and the server<br> MAY re-use the<br> RANDs in the AT_RAND attribute of the next full authentication<br> attempt.</pre><br><br>If compliant, how to configure it to generate fresh RANDs?<br><br>Thanks,<br>Sateesh<br></div></div></div></div></div><br>
<!--1--><hr size=1></hr> Connect with friends all over the world. <a href="http://in.rd.yahoo.com/tagline_messenger_1/*http://in.messenger.yahoo.com/?wm=n/"> Get Yahoo! India Messenger.</a></body></html>