Reply-Message in various clients & EAP vs CHAP.
Hi, Does anyone have a draft list of which clients actually support the Reply-Message and by which methods they can recieve them? The reason why I ask , it during initial tests (using chap) the built in windows CHAP supplicant would display the reply-messages being sent back from the server. Now we've moved on from CHAP to using EAP and the windows supplicant no longer displays the messages. Am I right in assuming that with EAP attributes from the access-accept packet only get to the NAS and that the NAS will strip out of the EAP message and pass it on to the supplicant and thats all the supplicant will ever get? In which case, although the Reply-Message attribute is also supported in PoD the client will never actually recieve it when using EAP ? Thanks, Arran
Arran Cudbard-Bell wrote:
Does anyone have a draft list of which clients actually support the Reply-Message and by which methods they can recieve them?
All clients will accept it. Very few will do anything useful with it.
The reason why I ask , it during initial tests (using chap) the built in windows CHAP supplicant would display the reply-messages being sent back from the server. Now we've moved on from CHAP to using EAP and the windows supplicant no longer displays the messages.
Yes.
Am I right in assuming that with EAP attributes from the access-accept packet only get to the NAS and that the NAS will strip out of the EAP message and pass it on to the supplicant and thats all the supplicant will ever get?
Yes.
In which case, although the Reply-Message attribute is also supported in PoD the client will never actually recieve it when using EAP ?
Yes. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Arran Cudbard-Bell