EAP-TLS Certificates

Peter Nixon listuser at peternixon.net
Mon Aug 13 22:52:37 CEST 2007


On Mon 13 Aug 2007, Alan DeKok wrote:
> A.L.M.Buxey at lboro.ac.uk wrote:
> > the listen directive is not active by default in the radiusd.conf , I
> > thought this would have been made the de facto way for 2.0
>
>   ? "bind_address" and "port" are no longer globally defined in
> radiusd.conf.  There is instead a top-level "listen" directive.
>
> > naslist, realms and clients are still present - obsolete in 1.1.x surely
> > GONE in 2.0
>
>   ? naslist && clients were deleted from CVS in 2005.  naspasswd &&
> realms are still there, along with "man" pages.  I've deleted those.
>
>   checkrad is a hack.  It's unmaintained, and nearly unmaintainable.  We
> should replace it with something better.
>
> > there is no commented out, ready to run experimental.conf line - as we
> > have for snmp.conf etc
>
>   The experimental.conf stuff is supposed to be made active a module at
> a time, rather than pulling everything in.

I think for 2.0 would should make an etc/raddb/experimental/xxx.conf setup 
with a main file somewhere which includes each one, but where each include 
line is commented out by default..

Cheers

-- 

Peter Nixon
http://peternixon.net/



More information about the Freeradius-Users mailing list