Norbert Wegener wrote:
Alan DeKok wrote:
Norbert Wegener <nw@sbs.de> wrote:
I can confirm this behaviour for 2.4.0rc1 with KLIPS and the actual version of freeradius.
...
FreeRADIUS uses the Framed-MTU attribute to calculate how much data to send to the client. Unfortunately, the calculation is probably a little wrong.
In the short term set the "fragment_size" in eap.conf to a smaller value, and it should work.
I think a patch for 1.0.5 would be good.
Alan DeKok.
Maybe this solves one part of the problem, but that alone does not help. I have tried different fragment_sizes. The results differs, but in no case I do get the l2tp/ppp session authenticated. I put the logs at http://www.wegener-net.de/freeradius, where you can see the differences. The filename ends with the involved fragment size. Which more information should I provide?
Norbert Wegener
Further analysis showed, that when using a netkey kernel instead of KLIPS and openswan-2.4.0rc1 , everything worked as expected. So the problem seems to be only partially causes by the fragment_size miscalculation. The main reason seems to be related to KLIPS. Norbert Wegener
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
_______________________________________________ Dev mailing list Dev@openswan.org http://lists.openswan.org/mailman/listinfo/dev