Re: Can we do sql just once during eap-tls handshake

Thanks Phil, I have tried that but regrettably it does not work. According to my logs eap returns "updated" every round when doing authorize. (During the authenticate stage eap returns "handled" except the last round where it returns "ok")

The comment preceeding eap in the default config says: # As of 2.0, the EAP module returns "ok" in the authorize stage # for TTLS and PEAP. In 1.x, it never returned "ok" here, so so there is no promise about any improvement when doing EAP-TLS .

You can try adding updated = return to eap section in authorize. Not sure if that breaks anything. Ivan Kalik Kalik Informatika ISP