Configuring multiple, chained EAP methods (i.e. EAP-TTLS-EAP-MD5-EAP-TNC)
Hi, is it possible to configure multiple eap methods that must all be executed for a user? I.e., I am thinking of something like: - establish a TTLS tunnel - do EAP-MD5 for user authentication - do EAP-TNC for platform authentication Currently, I just managed to do either EAP-MD5 or EAP-TNC inside the TTLS tunnel, not both. I see no option in the config files where multiple eap methods can be added. Thanks, Ingo
ingo.bente@inform.fh-hannover.de wrote:
is it possible to configure multiple eap methods that must all be executed for a user?
That will require source code changes.
Currently, I just managed to do either EAP-MD5 or EAP-TNC inside the TTLS tunnel, not both. I see no option in the config files where multiple eap methods can be added.
Yes. TNC is the first EAP method which is supposed to be run after another EAP method. As such, there hasn't been code in the server to support this. Alan DeKok.
participants (2)
-
Alan DeKok -
ingo.benteļ¼ inform.fh-hannover.de