Hi, we have never used RadSec before but are planning to do so for Eduroam. I found this (three years old) document from GÉANT on it, and was planning on trying it that way: <https://wiki.geant.org/display/H2eduroam/freeradius3-flr> But our national Eduroam center (DFN) recommends using radsecproxy instead, because according to them RadSec isn't yet stable in FR 3.0. What's your take on that? To be honest, I'd rather help fix problems in FR's RadSec implementation than install another piece of software - unless you recommend against it. -- .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:. .:.Regionales Rechenzentrum (RRZK).:. .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:.
<https://wiki.geant.org/display/H2eduroam/freeradius3-flr>
But our national Eduroam center (DFN) recommends using radsecproxy instead, because according to them RadSec isn't yet stable in FR 3.0. What's your take on that? To be honest, I'd rather help fix problems in FR's RadSec implementation than install another piece of software - unless you recommend against it.
It works for Moonshot. Moonshot uses RadSec in FR 3.0.x. But I see that some of the options mentioned in the document (like cert verification) are things that we don't test/use... With Regards Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Networkshop44, University of Manchester. Save the date: 22-24 March, 2016. #NWS44 Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
On Nov 24, 2015, at 6:01 AM, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
we have never used RadSec before but are planning to do so for Eduroam. I found this (three years old) document from GÉANT on it, and was planning on trying it that way:
<https://wiki.geant.org/display/H2eduroam/freeradius3-flr>
But our national Eduroam center (DFN) recommends using radsecproxy instead, because according to them RadSec isn't yet stable in FR 3.0. What's your take on that? To be honest, I'd rather help fix problems in FR's RadSec implementation than install another piece of software - unless you recommend against it.
RedSec is stable in 3.0.10. Alan DeKok.
--On 24. November 2015 um 10:50:33 -0500 Alan DeKok <aland@deployingradius.com> wrote:
But our national Eduroam center (DFN) recommends using radsecproxy instead, because according to them RadSec isn't yet stable in FR 3.0. What's your take on that? To be honest, I'd rather help fix problems in FR's RadSec implementation than install another piece of software - unless you recommend against it.
RedSec is stable in 3.0.10.
Thanks, that's what I thought. Unless DFN put their foot down and won't allow us to us it, I will give it a try. -- .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:. .:.Regionales Rechenzentrum (RRZK).:. .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:.
participants (3)
-
Alan DeKok -
Sebastian Hagedorn -
Stefan Paetow