Session-Timeout in Access-Challenge (that contains EAP-Message)
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access-Accept in Access-Challenge messages? - or to configure a different Session-Timeout value for Access-Challenges (which contain EAP-Message)? This is about the following section in RFC3579 where Session-Timeout in Access-Challenge is used to influence EAP retransmission behavior. http://tools.ietf.org/html/rfc3579#section-2.3 thanks! -gong -- View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-E... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Gong Cheng wrote:
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access-Accept in Access-Challenge messages?
In 2.1.7, see raddb/sites-available/default. Look for Access-Challenge. There is sample configuration.
- or to configure a different Session-Timeout value for Access-Challenges (which contain EAP-Message)?
This is about the following section in RFC3579 where Session-Timeout in Access-Challenge is used to influence EAP retransmission behavior.
I'm not sure any AP supports that. Alan DeKok.
Hi Alan, thanks for the answer. (and thanks to David too). I can't seem to find 2.1.7 yet, but I will keep this in mind. Just as an FYI, I do see commercial NAS code that implements this. Alan DeKok-2 wrote:
Gong Cheng wrote:
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access-Accept in Access-Challenge messages?
In 2.1.7, see raddb/sites-available/default. Look for Access-Challenge. There is sample configuration.
- or to configure a different Session-Timeout value for Access-Challenges (which contain EAP-Message)?
This is about the following section in RFC3579 where Session-Timeout in Access-Challenge is used to influence EAP retransmission behavior.
I'm not sure any AP supports that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-E... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Just checked hostapd and it seems to implement this too: hostapd/ieee802_1x.c: " case RADIUS_CODE_ACCESS_CHALLENGE: sm->eap_if->aaaEapReq = TRUE; if (session_timeout_set) { /* RFC 2869, Ch. 2.3.2; RFC 3580, Ch. 3.17 */ sm->eap_if->aaaMethodTimeout = session_timeout; " Gong Cheng wrote:
Hi Alan, thanks for the answer. (and thanks to David too). I can't seem to find 2.1.7 yet, but I will keep this in mind.
Just as an FYI, I do see commercial NAS code that implements this.
Alan DeKok-2 wrote:
Gong Cheng wrote:
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access-Accept in Access-Challenge messages?
In 2.1.7, see raddb/sites-available/default. Look for Access-Challenge. There is sample configuration.
- or to configure a different Session-Timeout value for Access-Challenges (which contain EAP-Message)?
This is about the following section in RFC3579 where Session-Timeout in Access-Challenge is used to influence EAP retransmission behavior.
I'm not sure any AP supports that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-E... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Am 08.07.2009 um 20:05 schrieb Gong Cheng:
Hi Alan, thanks for the answer. (and thanks to David too). I can't seem to find 2.1.7 yet, but I will keep this in mind.
I suppose that with 2.1.7, the stable version in GIT is meant, see: http://git.freeradius.org/ Have a nice day!
Just as an FYI, I do see commercial NAS code that implements this.
Alan DeKok-2 wrote:
Gong Cheng wrote:
Hi, I wonder if there is a way - not to include "Session-Timeout" value intended for Access- Accept in Access-Challenge messages?
In 2.1.7, see raddb/sites-available/default. Look for Access-Challenge. There is sample configuration.
- or to configure a different Session-Timeout value for Access- Challenges (which contain EAP-Message)?
This is about the following section in RFC3579 where Session- Timeout in Access-Challenge is used to influence EAP retransmission behavior.
I'm not sure any AP supports that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-E... Sent from the FreeRadius - User mailing list archive at Nabble.com.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Geschäftsführer: Stephan Mönninghoff, Hans Martin Kern, Tilman Haerdle Registergericht: Amtsgericht Münster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841
participants (3)
-
Alan DeKok -
Gong Cheng -
Nicolas Goutte