Just checked hostapd and it seems to implement this too: hostapd/ieee802_1x.c: " case RADIUS_CODE_ACCESS_CHALLENGE: sm->eap_if->aaaEapReq = TRUE; if (session_timeout_set) { /* RFC 2869, Ch. 2.3.2; RFC 3580, Ch. 3.17 */ sm->eap_if->aaaMethodTimeout = session_timeout; " Gong Cheng wrote:
Hi Alan, thanks for the answer. (and thanks to David too). I can't seem to find 2.1.7 yet, but I will keep this in mind.
Just as an FYI, I do see commercial NAS code that implements this.
Alan DeKok-2 wrote:
Gong Cheng wrote:
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access-Accept in Access-Challenge messages?
In 2.1.7, see raddb/sites-available/default. Look for Access-Challenge. There is sample configuration.
- or to configure a different Session-Timeout value for Access-Challenges (which contain EAP-Message)?
This is about the following section in RFC3579 where Session-Timeout in Access-Challenge is used to influence EAP retransmission behavior.
I'm not sure any AP supports that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-E... Sent from the FreeRadius - User mailing list archive at Nabble.com.