Hi all, Does anybody know how to enable TLS Session Cache? To use the EAP-TLS fast re-authentication. Thanks, Fernando.
Just a clarification, My freeradius version is 2.0.2 and I would like to enable EAP-TLS session resumption. Is it possible? Fernando wrote:
Hi all,
Does anybody know how to enable TLS Session Cache? To use the EAP-TLS fast re-authentication.
Thanks, Fernando. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You enable that on your AP not your radius server. Ivan Kalik Kalik Informatika ISP Dana 9/3/2009, "Fernando" <fbernal@um.es> piše:
Just a clarification, My freeradius version is 2.0.2 and I would like to enable EAP-TLS session resumption.
Is it possible?
Fernando wrote:
Hi all,
Does anybody know how to enable TLS Session Cache? To use the EAP-TLS fast re-authentication.
Thanks, Fernando. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tnt@kalik.net wrote:
You enable that on your AP not your radius server.
No, in the AP you can use PMKSA caching. I want session resumption in EAP-TLS which is enabled in RADIUS server. In Freeradius version 2.1.1 I have seen that there is a section cache ... cache { # # Enable it. The default is "no". # Deleting the entire "cache" subsection # Also disables caching. # # You can disallow resumption for a # particular user by adding the following # attribute to the control item list: # # Allow-Session-Resumption = No # # If "enable = no" below, you CANNOT # enable resumption for just one user # by setting the above attribute to "yes". # enable = no I want to know if TLS session resumption could be enabled in freeradius 2.0.2
Ivan Kalik Kalik Informatika ISP
Dana 9/3/2009, "Fernando" <fbernal@um.es> piše:
Just a clarification, My freeradius version is 2.0.2 and I would like to enable EAP-TLS session resumption.
Is it possible?
Fernando wrote:
Hi all,
Does anybody know how to enable TLS Session Cache? To use the EAP-TLS fast re-authentication.
Thanks, Fernando. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
No, in the AP you can use PMKSA caching. I want session resumption in EAP-TLS which is enabled in RADIUS server. In Freeradius version 2.1.1 I have seen that there is a section cache ...
cache { # # Enable it. The default is "no". # Deleting the entire "cache" subsection # Also disables caching. # # You can disallow resumption for a # particular user by adding the following # attribute to the control item list: # # Allow-Session-Resumption = No # # If "enable = no" below, you CANNOT # enable resumption for just one user # by setting the above attribute to "yes". # enable = no
I want to know if TLS session resumption could be enabled in freeradius 2.0.2
Probably not. Go to the freeradius main page and click on the link for 2.1.3. Then go down the page and see when was that feature added. Ivan Kalik Kalik Informatika ISP
Fernando wrote:
Just a clarification, My freeradius version is 2.0.2 and I would like to enable EAP-TLS session resumption.
Is it possible?
No. If you want to use the cache, use a version that supports it (see the changelog), and read eap.conf for how to configure it. Alan DeKok.
participants (3)
-
Alan DeKok -
Fernando -
tnt@kalik.net