"sdfsdv sdfdsf" <dr_ojboli@wp.pl> wrote:
First, we can't find any kind of fast rekeying code in reeradius. Is freeradius supporting anyhow such thing? Any other eap method is using fast rekeying?
It's not implemented in the server.
eap-ikev2 is using it's own id data to identify supplicant and sever, it can be different than eap id.
Please be specific. There EAP protocol Id's, which are 8-bit numbers. Then there is the EAP-Identity. Which one do you mean?
And we have a problem with users authorization, in a situation when eap id is different than internal ikev2 id, freeradius is giving access to user data (gathered in users.conf) only for users described by an eap id. Can eap method somehow access other users data?
I *think* what you mean is that the EAP-Identity is not the same as the User-Name. Since FreeRADIUS is first a RADIUS server, it presumes that the users identity is in the User-Name attribute. You can change that in your module, if you want. Alan DeKok.