Re: EAP-GTC configuration
Hello Alan and thanks for answering. More questions were raised: 1) Is the first entered password being transferred to FreeRadius? What attributes can we use in order to obtain it? In which way is it encoded? 2) May you please send us an example for attribute to check, redirect sentence and where should the check be placed? 3) Can we configure FreeRadius as a client of another Radius (to whom we want to redirect to) and so we can establish a secured channel through? 4) The documents you refer us to are not complete. Are there any other documentation regarding FreeRadius full configuration? Regards, Yariv Levavi SafeNet's Integration Team The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
Hi,
1) Is the first entered password being transferred to FreeRadius? What attributes can we use in order to obtain it? In which way is it encoded?
run FR in full debug mode eg radiusd -X , to see what is being sent to it.
3) Can we configure FreeRadius as a client of another Radius (to whom we want to redirect to) and so we can establish a secured channel through?
yes. proxying
4) The documents you refer us to are not complete. Are there any other documentation regarding FreeRadius full configuration?
everyone has their own specific requirements - some are very bespoke and such direct dedicated documents are unlikely to exist. you need to break your requirements down into their components and check each parts configuration within FreeRADIUS alan
Levavi, Yariv wrote:
1) Is the first entered password being transferred to FreeRadius?
What does the debug output say?
What attributes can we use in order to obtain it? In which way is it encoded?
You can see it all in the debug output. Or, by reading the EAP-GTC specs. Which is what I did...
2) May you please send us an example for attribute to check, redirect sentence and where should the check be placed?
I'm asking you to do some work yourself. It's not hard. All of the information you need is in the debug output. If you're building a commercial product based on FreeRADIUS, it would be a good idea to understand how to debug it.
3) Can we configure FreeRadius as a client of another Radius (to whom we want to redirect to) and so we can establish a secured channel through?
That's called "proxying". It works. It's also documented.
4) The documents you refer us to are not complete. Are there any other documentation regarding FreeRadius full configuration?
You have all of the documentation which is publicly available. To be frank, about 99% of the FreeRADIUS behavior is documented in the configuration files. The rest of the problems people see are with *clients*, which we cannot document. Because we didn't write the client. If you want to figure out what the client sends to FreeRADIUS, read the debug output. Alan DeKok.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Levavi, Yariv