I will be on paternity leave starting August 22nd and returning once things around the house calm down to an acceptable level. If you have specific concerns that must be addressed immediately please contact "Gene deVore <gdevore@canbytel.com>" Thanks, Scott Baker
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server? We have two requirements at hand: 1) Load testing the RADIUS servers (two nodes) 2) Using the client to verify correct operation of the server on a day to day basis (eg. for Nagios) As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder how much work it would be to allow EAP-TLS communications be tested? (for someone unfamiliar with FreeRADIUS internals, but reasonably familiar with C/gdb etc) Any insight is appreciated! Thanks, Ben
As soon as I posted I found JRADIUS (jradius.sf.net <http://jradius.sf.net>) which supports EAP-TLS in its RADIUS client. I've since got this to work and can easily cobble together the necessary pieces. Cheers, Ben On 8/30/05, Ben Walding <ben.walding@gmail.com> wrote:
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server?
We have two requirements at hand: 1) Load testing the RADIUS servers (two nodes) 2) Using the client to verify correct operation of the server on a day to day basis (eg. for Nagios)
As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder how much work it would be to allow EAP-TLS communications be tested? (for someone unfamiliar with FreeRADIUS internals, but reasonably familiar with C/gdb etc)
Any insight is appreciated!
Thanks,
Ben
Ben Walding <ben.walding@gmail.com> wrote:
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server?
It doesn't support EAP-TLS. But given the EAP-SIM needs, TLS, it may not be too hard to do...
As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder how much work it would be to allow EAP-TLS communications be tested? (for someone unfamiliar with FreeRADIUS internals, but reasonably familiar with C/gdb etc)
Probably less than a week. Alan DeKok.
Ben, You're easiest option is probably eapol_test from wpa_supplicant. josh. Ben Walding wrote:
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server?
We have two requirements at hand: 1) Load testing the RADIUS servers (two nodes) 2) Using the client to verify correct operation of the server on a day to day basis (eg. for Nagios)
As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder how much work it would be to allow EAP-TLS communications be tested? (for someone unfamiliar with FreeRADIUS internals, but reasonably familiar with C/gdb etc)
Any insight is appreciated!
Thanks,
Ben
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
bakers -
Ben Walding -
Josh Howlett