<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Aharoni;
        panose-1:2 1 8 3 2 1 4 3 2 3;}
@font-face
        {font-family:"Perpetua Titling MT";
        panose-1:2 2 5 2 6 5 5 2 8 4;}
@font-face
        {font-family:"Agency FB";
        panose-1:2 11 5 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:1497188800;
        mso-list-type:hybrid;
        mso-list-template-ids:-275477316 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
        {mso-level-text:"%1\)";
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level2
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level3
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        text-indent:-9.0pt;}
@list l0:level4
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level5
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level6
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        text-indent:-9.0pt;}
@list l0:level7
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level8
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;}
@list l0:level9
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        text-indent:-9.0pt;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1045" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hello,<o:p></o:p></p><p class=MsoNormal><br>We are configuring EAP-GTC in our FreeRADIUS environment (please note that SAS is our authentication server):<o:p></o:p></p><p class=MsoNormal><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Picture_x0020_57" o:spid="_x0000_s1043" type="#_x0000_t75" alt="Radius Client" style='position:absolute;margin-left:-6.55pt;margin-top:8.55pt;width:78pt;height:58.5pt;z-index:251681792;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image001.emz@01CFA747.9F2173C0" o:title="Radius Client" />
</v:shape><v:shape id="Picture_x0020_20" o:spid="_x0000_s1044" type="#_x0000_t75" alt="SAS freeRadius agent" style='position:absolute;margin-left:292.55pt;margin-top:10.8pt;width:71.25pt;height:58.5pt;z-index:251683840;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image002.emz@01CFA747.9F2173C0" o:title="SAS freeRadius agent" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:relative;z-index:251681792;left:-9px;top:11px;width:494px;height:92px'><table cellpadding=0 cellspacing=0 align=left><tr><td width=0 height=0></td><td width=104></td><td width=295></td><td width=95></td></tr><tr><td height=3></td><td rowspan=2 align=left valign=top><img width=104 height=78 src="cid:image003.png@01CFA747.9F2173C0" alt="Radius Client" v:shapes="Picture_x0020_57"></td></tr><tr><td height=75></td><td></td><td rowspan=2 align=left valign=top><img width=95 height=78 src="cid:image004.png@01CFA747.9F2173C0" alt="SAS freeRadius agent" v:shapes="Picture_x0020_20"></td></tr><tr><td height=3></td></tr></table></span><![endif]><o:p> </o:p></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><br style='mso-ignore:vglayout' clear=ALL><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><!--[if gte vml 1]><v:shape id="Picture_x0020_56" o:spid="_x0000_s1042" type="#_x0000_t75" alt="PEAP (freeRadius)" style='position:absolute;left:0;text-align:left;margin-left:132.1pt;margin-top:-17.65pt;width:76.5pt;height:58.5pt;z-index:251660288;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image005.emz@01CFA747.9F2173C0" o:title="PEAP (freeRadius)" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:relative;z-index:251660288'><span style='left:0px;position:absolute;left:176px;top:-24px;width:102px;height:78px'><img width=102 height=78 src="cid:image006.png@01CFA747.9F2173C0" alt="PEAP (freeRadius)" v:shapes="Picture_x0020_56"></span></span><![endif]><span dir=LTR> </span><!--[if gte vml 1]><v:shape id="Picture_x0020_54" o:spid="_x0000_s1041" type="#_x0000_t75" alt="SAS" style='position:absolute;left:0;text-align:left;margin-left:440.45pt;margin-top:-17.65pt;width:71.25pt;height:58.5pt;z-index:251662336;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image007.emz@01CFA747.9F2173C0" o:title="SAS" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:relative;z-index:251662336'><span style='left:0px;position:absolute;left:587px;top:-24px;width:95px;height:78px'><img width=95 height=78 src="cid:image008.png@01CFA747.9F2173C0" alt=SAS v:shapes="Picture_x0020_54"></span></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_53" o:spid="_x0000_s1040" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:13.75pt;margin-top:58pt;width:159.6pt;height:11.25pt;z-index:251663360;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image009.png@01CFA747.9F2173C0" o:title="" cropleft="-1197522f" cropright="-4766f" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251663360;left:0px;margin-left:18px;margin-top:77px;width:213px;height:15px'><img width=213 height=15 src="cid:image010.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_53"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_52" o:spid="_x0000_s1039" type="#_x0000_t75" alt="Access Request (username password over EAP-GTC)" style='position:absolute;left:0;text-align:left;margin-left:28.8pt;margin-top:47.55pt;width:129pt;height:39pt;z-index:251664384;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image011.emz@01CFA747.9F2173C0" o:title="Access Request (username password over EAP-GTC)" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251664384;left:0px;margin-left:38px;margin-top:63px;width:172px;height:52px'><img width=172 height=52 src="cid:image012.png@01CFA747.9F2173C0" alt="Access Request (username password over EAP-GTC)" v:shapes="Picture_x0020_52"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_51" o:spid="_x0000_s1038" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:13.75pt;margin-top:210.1pt;width:159.6pt;height:11.25pt;z-index:251665408;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image009.png@01CFA747.9F2173C0" o:title="" cropleft="-1197522f" cropright="-4766f" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251665408;left:0px;margin-left:18px;margin-top:280px;width:213px;height:15px'><img width=213 height=15 src="cid:image010.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_51"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_50" o:spid="_x0000_s1037" type="#_x0000_t75" alt="TokenValidator Web Service" style='position:absolute;left:0;text-align:left;margin-left:341.15pt;margin-top:237.85pt;width:117pt;height:24.75pt;z-index:251666432;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image013.emz@01CFA747.9F2173C0" o:title="TokenValidator Web Service" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251666432;left:0px;margin-left:455px;margin-top:317px;width:156px;height:33px'><img width=156 height=33 src="cid:image014.png@01CFA747.9F2173C0" alt="TokenValidator Web Service" v:shapes="Picture_x0020_50"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_49" o:spid="_x0000_s1036" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:174.65pt;margin-top:248.15pt;width:151.65pt;height:11.25pt;z-index:251667456;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image015.png@01CFA747.9F2173C0" o:title="" cropleft="-1131986f" cropright="-7149f" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251667456;left:0px;margin-left:233px;margin-top:331px;width:202px;height:15px'><img width=202 height=15 src="cid:image016.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_49"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_48" o:spid="_x0000_s1035" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:13.75pt;margin-top:39.4pt;width:3pt;height:222.75pt;z-index:251668480;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image017.png@01CFA747.9F2173C0" o:title="" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251668480;left:0px;margin-left:18px;margin-top:53px;width:4px;height:297px'><img width=4 height=297 src="cid:image017.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_48"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_47" o:spid="_x0000_s1034" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:171.65pt;margin-top:39.45pt;width:3pt;height:222.75pt;z-index:251669504;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image017.png@01CFA747.9F2173C0" o:title="" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251669504;left:0px;margin-left:229px;margin-top:53px;width:4px;height:297px'><img width=4 height=297 src="cid:image017.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_47"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_46" o:spid="_x0000_s1033" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:324.4pt;margin-top:39.45pt;width:3pt;height:222.75pt;z-index:251670528;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image017.png@01CFA747.9F2173C0" o:title="" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251670528;left:0px;margin-left:433px;margin-top:53px;width:4px;height:297px'><img width=4 height=297 src="cid:image017.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_46"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_45" o:spid="_x0000_s1032" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:480.9pt;margin-top:35.05pt;width:3pt;height:222.75pt;z-index:251671552;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image017.png@01CFA747.9F2173C0" o:title="" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251671552;left:0px;margin-left:641px;margin-top:47px;width:4px;height:297px'><img width=4 height=297 src="cid:image017.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_45"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_44" o:spid="_x0000_s1031" type="#_x0000_t75" alt="Verify user and password with Active Directory" style='position:absolute;left:0;text-align:left;margin-left:136.5pt;margin-top:95.15pt;width:85.5pt;height:44.25pt;z-index:251672576;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image018.emz@01CFA747.9F2173C0" o:title="Verify user and password with Active Directory" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251672576;left:0px;margin-left:182px;margin-top:127px;width:114px;height:59px'><img width=114 height=59 src="cid:image019.png@01CFA747.9F2173C0" alt="Verify user and password with Active Directory" v:shapes="Picture_x0020_44"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_43" o:spid="_x0000_s1030" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:12.25pt;margin-top:151.85pt;width:159.25pt;height:11.25pt;z-index:251673600;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image020.png@01CFA747.9F2173C0" o:title="" cropright="-862163f" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251673600;left:0px;margin-left:17px;margin-top:202px;width:212px;height:15px'><img width=212 height=15 src="cid:image021.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_43"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_42" o:spid="_x0000_s1029" type="#_x0000_t75" alt="Access  Challenge Response  (EAP-GTC)" style='position:absolute;left:0;text-align:left;margin-left:33.15pt;margin-top:146.5pt;width:129pt;height:29.25pt;z-index:251674624;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image022.emz@01CFA747.9F2173C0" o:title="Access  Challenge Response  (EAP-GTC)" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251674624;left:0px;margin-left:44px;margin-top:195px;width:172px;height:39px'><img width=172 height=39 src="cid:image023.png@01CFA747.9F2173C0" alt="Access  Challenge Response  (EAP-GTC)" v:shapes="Picture_x0020_42"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_41" o:spid="_x0000_s1028" type="#_x0000_t75" alt="Second Access Request (OTP over EAP-GTC)" style='position:absolute;left:0;text-align:left;margin-left:28.8pt;margin-top:195.35pt;width:129pt;height:32.25pt;z-index:251675648;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image024.emz@01CFA747.9F2173C0" o:title="Second Access Request (OTP over EAP-GTC)" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251675648;left:0px;margin-left:38px;margin-top:260px;width:172px;height:43px'><img width=172 height=43 src="cid:image025.png@01CFA747.9F2173C0" alt="Second Access Request (OTP over EAP-GTC)" v:shapes="Picture_x0020_41"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_40" o:spid="_x0000_s1027" type="#_x0000_t75" alt="Access Request  (OTP over PAP)" style='position:absolute;left:0;text-align:left;margin-left:194.5pt;margin-top:242.95pt;width:117pt;height:31.5pt;z-index:251676672;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image026.emz@01CFA747.9F2173C0" o:title="Access Request  (OTP over PAP)" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251676672;left:0px;margin-left:259px;margin-top:324px;width:156px;height:42px'><img width=156 height=42 src="cid:image027.png@01CFA747.9F2173C0" alt="Access Request  (OTP over PAP)" v:shapes="Picture_x0020_40"></span><![endif]><!--[if gte vml 1]><v:shape id="Picture_x0020_39" o:spid="_x0000_s1026" type="#_x0000_t75" style='position:absolute;left:0;text-align:left;margin-left:324.3pt;margin-top:245.8pt;width:158.35pt;height:11.25pt;z-index:251677696;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:margin;mso-height-relative:margin'>
<v:imagedata src="cid:image028.png@01CFA747.9F2173C0" o:title="" cropleft="-1086805f" cropright="-728f" />
<o:lock v:ext="edit" aspectratio="f" />
</v:shape><![endif]--><![if !vml]><span style='mso-ignore:vglayout;position:absolute;z-index:251677696;left:0px;margin-left:432px;margin-top:328px;width:211px;height:15px'><img width=211 height=15 src="cid:image029.png@01CFA747.9F2173C0" v:shapes="Picture_x0020_39"></span><![endif]><span dir=LTR><o:p></o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal align=center dir=RTL style='margin-right:1.5in;text-align:center;direction:rtl;unicode-bidi:embed'><span dir=LTR><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Our questions are:<o:p></o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>1)<span style='font:7.0pt "Times New Roman"'>      </span></span><![endif]><span dir=LTR></span>Do you happen to know how do we obtain the plain password provided in the first Access Response message? Currently we attempt to access the active directory by running an external execution program. This means we need to get the password attribute via freeRadius attributes/environment. If we fail to find a way to get the password information from freeRadius environment then we would consider changing our design by writing a freeRadius code module. <o:p></o:p></p><p class=MsoListParagraph><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>2)<span style='font:7.0pt "Times New Roman"'>      </span></span><![endif]><span dir=LTR></span>The PEAP (which is actually a freeRadius instance) is currently configured is to work to proxy all access requests. This is done by setting the “users” configuration file redirect every incoming access request (<span style='font-size:8.0pt;color:#7030A0'>DEFAULT FreeRADIUS-Proxied-to == 127.0.0.1, Proxy-to-Realm := DEFAULT</span>). Do you know if there is way to apply redirection upon demand (in our case we would like to handle the first access request locally by verifying the username and password against the AD and redirect only the second access request, containing the user’s OTP).<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>3)<span style='font:7.0pt "Times New Roman"'>      </span></span><![endif]><span dir=LTR></span>The OTP in the second access request is provided as a plain text (over ssl). Is there any way we proxy it to freeRadius agent in a secure way (e.g. MSCHAP2)? <o:p></o:p></p><p class=MsoListParagraph><o:p> </o:p></p><p class=MsoListParagraph style='text-indent:-.25in;mso-list:l0 level1 lfo1'><![if !supportLists]><span style='mso-list:Ignore'>4)<span style='font:7.0pt "Times New Roman"'>      </span></span><![endif]><span dir=LTR></span>Do you have any good references for freeRadius configuration docs?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-family:"Perpetua Titling MT","serif";color:#1F497D'>Yariv Levavi<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:14.0pt;font-family:"Agency FB","sans-serif";color:#00B0F0'>SafeNet's Integration Team<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>
<pre>The information contained in this electronic mail transmission 
may be privileged and confidential, and therefore, protected 
from disclosure. If you have received this communication in 
error, please notify us immediately by replying to this 
message and deleting it from your computer without copying 
or disclosing it.