<html><HEAD><LINK media=all href="static/deg/css/wysiwyg.css" type=text/css rel=stylesheet>
<META content="MSHTML 6.00.6000.16825" name=GENERATOR></HEAD>
<BODY>
<P>A couple comments on this thread...</P>
<P>The problem with including Reply message text in EAP is that the Reply attribute comes in the Accept or Reject message, which will be carrying the EAP Success or Fail. EAP Success/Fail like a Reject doesn't carry attributes, so a Reply would have to be turned into a Notification message by a smart AP and sent as an exchange prior to the Success/Fail. That doesn't look likely. </P>
<P>An EAP method can send it's own Notification message including any text it wants. This will get wrapped in RADIUS with an EAP message attribute in an Access-Challenge, and go the normal path. The next problem is getting the supplicant to do anything with it, like show the user. </P>
<P>This can be a problem if your supplicant is Windows. The Windows wireless EAP system silently discards EAP Notification messages on XP. On Vista, an EAPHost API method can get them if they ask. A RasEap API method is SOL, because they are discarded and not responded to, breaking the protocol. (Ask me how I know ;^} ) Look for a forthcoming patch for Vista.</P>
<P>Dave.<BR><BR>Jun 8, 2009 06:38:05 AM, freeradius-users@lists.freeradius.org wrote:<BR></P>
<BLOCKQUOTE style="BORDER-LEFT: rgb(102,153,204) 3px solid">A.L.M.Buxey@lboro.ac.uk wrote:<BR>> could reply messages be used with some smart server-end code to provide <BR>> a data communication channel? ie user A has code that attempts to use EAP<BR>> with special username coding...the remote server is designed<BR>> to throw responses in EAP messages...which the modified supplicant<BR>> on the client can then extract? this could tunnel traffic through<BR>> an 802.1X restricted network?<BR><BR> For TTLS, just use vendor-specific attributes inside of the TTLS tunnel.<BR><BR> It shouldn't be too hard to modify the open source supplicants to look<BR>for a message, and do *something* with it.<BR><BR> Alan DeKok.<BR>-<BR>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<BR></BLOCKQUOTE></BODY></html>