dear all, hi!<br><br>Now I use fr 2.19 for wimax. The CPE asks for session resumption in TTLS-MACHAPv2. like this:<br><br>Mon Aug 9 16:14:16 2010 : Info: [eap] Request found, released from the list<br>Mon Aug 9 16:14:16 2010 : Info: [eap] EAP/ttls<br>Mon Aug 9 16:14:16 2010 : Info: [eap] processing type ttls<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] Authenticate<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] processing EAP-TLS<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] eaptls_verify returned 7 <br>Mon Aug 9 16:14:16 2010 : Info: [ttls] Done initial handshake<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] <<< TLS 1.0 ChangeCipherSpec [length 0001] <br>Mon Aug 9 16:14:16 2010 : Info: [ttls] <<< TLS 1.0 Handshake [length 0010], Finished <br>Mon Aug 9 16:14:16 2010 : Info: [ttls] TLS_accept: SSLv3 read finished A <br>Mon Aug 9 16:14:16 2010 : Info: [ttls] (other): SSL negotiation finished successfully <br>Mon Aug 9 16:14:16 2010 : Debug: SSL Connection Established <br>Mon Aug 9 16:14:16 2010 : Debug: SSL Application Data<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] eaptls_process returned 3 <br>Mon Aug 9 16:14:16 2010 : Info: [ttls] Skipping Phase2 due to session resumption<br>Mon Aug 9 16:14:16 2010 : Info: [ttls] FAIL: Forcibly stopping session resumption as it is not allowed.<br>Mon Aug 9 16:14:16 2010 : Info: [eap] Freeing handler<br>Mon Aug 9 16:14:16 2010 : Info: ++[eap] returns reject<br>Mon Aug 9 16:14:16 2010 : Info: Failed to authenticate the user.<br>Mon Aug 9 16:14:16 2010 : Info: Using Post-Auth-Type Reject<br>Mon Aug 9 16:14:16 2010 : Info: +- entering group REJECT {...}<br>Mon Aug 9 16:14:16 2010 : Info: [attr_filter.access_reject] expand: %{User-Name} -> B8616F001F47<br>Mon Aug 9 16:14:16 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11<br>Mon Aug 9 16:14:16 2010 : Info: ++[attr_filter.access_reject] returns updated<br>Mon Aug 9 16:14:16 2010 : Info: Delaying reject of request 69 for 1 seconds<br>Mon Aug 9 16:14:16 2010 : Debug: Going to the next request<br>Mon Aug 9 16:14:16 2010 : Debug: Waking up in 0.9 seconds.<br>Mon Aug 9 16:14:17 2010 : Info: Sending delayed reject for request 69<br>Sending Access-Reject of id 3 to 25.25.25.25 port 36867<br> EAP-Message = 0x043c0004<br> Message-Authenticator = 0x00000000000000000000000000000000<br><br><br>But , if I enabled session resumption by setting it in eap.conf by:<br><br>#<br> # Enable it. The default is "no".<br> # Deleting the entire "cache" subsection<br> # Also disables caching.<br> #<br> # You can disallow resumption for a<br> # particular user by adding the following<br> # attribute to the control item list:<br> #<br> # Allow-Session-Resumption = No<br> #<br> # If "enable = no" below, you CANNOT<br> # enable resumption for just one user<br> # by setting the above attribute to "yes".<br> #<br> enable = yes<br><br><br>then I got:<br><br><br>Mon Aug 9 16:55:26 2010 : Info: [eap] EAP/ttls<br>Mon Aug 9 16:55:26 2010 : Info: [eap] processing type ttls<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] Authenticate<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] processing EAP-TLS<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] Received TLS ACK<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] ACK handshake is finished<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] eaptls_verify returned 3 <br>Mon Aug 9 16:55:26 2010 : Info: [ttls] eaptls_process returned 3 <br>Mon Aug 9 16:55:26 2010 : Info: [ttls] Saving response in the cache<br>Mon Aug 9 16:55:26 2010 : Info: [ttls] WARNING: No information to cache: session caching will be disabled for this session.<br>Mon Aug 9 16:55:26 2010 : Info: [eap] Freeing handler<br>Mon Aug 9 16:55:26 2010 : Info: ++[eap] returns ok<br>Mon Aug 9 16:55:26 2010 : Info: +- entering group post-auth {...}<br>Mon Aug 9 16:55:26 2010 : Info: ++[exec] returns noop<br>Mon Aug 9 16:55:26 2010 : Info: expand: %{User-Name} -> 1109d0389bf34a72981580a304b50f3b<br>Mon Aug 9 16:55:26 2010 : Info: ++[reply] returns noop<br>Mon Aug 9 16:55:26 2010 : Info: [wimax] MIP-RK = 0x61c8c180fc45a070ca34e0d84e905c23329eec7d5ae69fe3f037d0b404988c7fec960a3dfcebba7615bf1a616ae527f699c87a93e29d66dc79f7fb02208fc1c1<br>Mon Aug 9 16:55:26 2010 : Info: [wimax] MIP-SPI = 29e23a18<br>Mon Aug 9 16:55:26 2010 : Info: [wimax] WARNING: WiMAX-IP-Technology not found in reply.<br>Mon Aug 9 16:55:26 2010 : Info: [wimax] WARNING: Not calculating MN-HA keys<br>Mon Aug 9 16:55:26 2010 : Info: ++[wimax] returns updated<br>Mon Aug 9 16:55:26 2010 : Info: expand: %{EAP-MSK} -> <br>Mon Aug 9 16:55:26 2010 : Info: expand: %{User-Name} -> 1109d0389bf34a72981580a304b50f3b<br>Mon Aug 9 16:55:26 2010 : Info: expand: %{md5:%{User-Name}} -> 879d5828deac9e6abd6b86721968d541<br>Mon Aug 9 16:55:26 2010 : Info: ++[reply] returns updated<br>Sending Access-Accept of id 7 to 25.25.25.25 port 36867<br><br>And when resumption:<br><br>Mon Aug 9 16:53:46 2010 : Info: [eap] Request found, released from the list<br>Mon Aug 9 16:53:46 2010 : Info: [eap] EAP/ttls<br>Mon Aug 9 16:53:46 2010 : Info: [eap] processing type ttls<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] Authenticate<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] processing EAP-TLS<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] eaptls_verify returned 7 <br>Mon Aug 9 16:53:46 2010 : Info: [ttls] Done initial handshake<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] <<< TLS 1.0 ChangeCipherSpec [length 0001] <br>Mon Aug 9 16:53:46 2010 : Info: [ttls] <<< TLS 1.0 Handshake [length 0010], Finished <br>Mon Aug 9 16:53:46 2010 : Info: [ttls] TLS_accept: SSLv3 read finished A <br>Mon Aug 9 16:53:46 2010 : Info: [ttls] (other): SSL negotiation finished successfully <br>Mon Aug 9 16:53:46 2010 : Debug: SSL Connection Established <br>Mon Aug 9 16:53:46 2010 : Debug: SSL Application Data<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] eaptls_process returned 3 <br>Mon Aug 9 16:53:46 2010 : Info: [ttls] Skipping Phase2 due to session resumption<br>Mon Aug 9 16:53:46 2010 : Info: [ttls] WARNING: No information in cached session!<br>Mon Aug 9 16:53:46 2010 : Info: [eap] Freeing handler<br>Mon Aug 9 16:53:46 2010 : Info: ++[eap] returns reject<br>Mon Aug 9 16:53:46 2010 : Info: Failed to authenticate the user.<br>Mon Aug 9 16:53:46 2010 : Info: Using Post-Auth-Type Reject<br>Mon Aug 9 16:53:46 2010 : Info: +- entering group REJECT {...}<br>Mon Aug 9 16:53:46 2010 : Info: [attr_filter.access_reject] expand: %{User-Name} -> 5e6b5185dcc44c0db5e23c6f0668c7a6<br>Mon Aug 9 16:53:46 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11<br>Mon Aug 9 16:53:46 2010 : Info: ++[attr_filter.access_reject] returns updated<br>Mon Aug 9 16:53:46 2010 : Info: Delaying reject of request 109 for 1 seconds<br>Mon Aug 9 16:53:46 2010 : Debug: Going to the next request<br><br><br>I don't know how to set the following:<br><br># You can disallow resumption for a<br> # particular user by adding the following<br> # attribute to the control item list:<br> #<br> # Allow-Session-Resumption = No<br><br>It seems this attr can't be added into the access-xxx messages.<br><br>How can I do to enable session resumption in fr?<br><br><br><span title="neteasefooter"/><hr/>
<a href="http://mail.163.com/?from=fe1" target="_blank">网易邮箱，没有垃圾邮件的邮箱。</a>
</span>