FW: TTLS and PAP

[Alan DeKok]

<martin.p.bradley at bt.com> wrote:
> I'm trying to get TTLS/PAP working using freeradius 1.0.4.  I must have
> it configured incorrectly because its giving a Segmentation fault just
> before giving the Access-Accept & EAP-Success back to the switch.  I
> have searched the archives for a solution but not found help to sort my
> problem out.

  See doc/bugs

> I don't understand is why the modcall[authorise] appear often in request
> processing before modcall[authenticate].  I thought the order was to
> authenticate a user and then once we are sure they are who they say they
> are then we authorise them to use the network.

  Due to historical issues, FreeRADIUS has pre-authenticate,
authenticate, and post-authenticate.  The pre-authenticate is called
"authorize".

  The sections could just as easily be called "foo", "bar", and "baz".
It makes no difference to the operation of the server.

  Alan DeKok.