Josh Howlett wrote:
That's certainly a feature of some Cisco WAPs.
If anyone knows of a supplicant that does anything *useful* with EAP-Notification (like, you know, notify the user) then that would be interesting to hear :-)
wpa_supplicant supports it; changelog says it was added back in May 2005 * display EAP Notification messages to user through control interface with "CTRL-EVENT-EAP-NOTIFICATION" prefix Whether the GUIs that sit on top of it take notice is another matter. windows XP supplicant displays the Reply-Message attribute in one of those annoying yellow popup bubbles, but only for straight CHAP ?! Mac OSX logs the notifications in the system log... Though given that 90% of mac users probably don't know what a terminal window is... not that much use ! It'd be interesting to see if there was any way to get hooks into the eapol client, then you could transfer the EAP notifications over into the growl Notification framework. Give you a neat mechanism to berate your Mac users for AUP transgressions :) --- Alan, Any chance the rlm_eap failure codes/verbose error messages could be made available as attributes in the request list ? --- Thanks, Arran
josh.
-----Original Message----- From: freeradius-users-bounces+josh.howlett=ja.net@lists.freeradius. org [mailto:freeradius-users-bounces+josh.howlett=ja.net@lists.fre
eradius.org] On Behalf Of Arran Cudbard-Bell
Sent: 03 January 2008 12:50 To: FreeRadius users mailing list Subject: EAP Notification
Hi, Running a packet capture of an EAP TTLS session against FR cvs head, noticed EAP Notifcation packets are being sent. The type-data appears to match that of the Reply-Message. Is this a feature of rlm_eap that I missed before, or is the NAS being clever about it's interpretation of the Access-Accept packet, and encapsulating the Reply-Message attribute in an EAP-Request Notification packet ?
Either way it's pretty cool, and the message gets logged in /var/log/system.log (On Mac OS X) which has the potential to be useful for debugging...
Thanks, Arran
-- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900