PAP2EAP bridging

[Alan DeKok]

Dinko Korunic wrote:
> At this moment we have a PAP to EAP bridge which utilises multithreaded
> Java server based on TinyRadius server API which invokes eapol_test as a
> client per every given request. This is quite ugly hack, unfortunately.

  It's pretty close to a real solution.

> Judging from the rlm_eap and proxy code in FreeRADIUS, I would say there
> is no way of doing it with current modules/code. I thought of hacking
> rlm_eap and making it to copy PAP requests to TTLS ones which can be later
> proxied. Is this the correct way?

  No.  The server implements the *server* side of TTLS, not the client side.

  You can run eapol_test directly from FreeRADIUS, but that's not much
better than what you're doing right now.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog