TTLS working. Is it secure?

[tnt at kalik.co.yu]

> Why there are 4 request for only one authentication process? 

That's quite a normal sequence of Requsts and Challenges. EAP works that
way.

> What is wrongwith it?

Nothing

> What does "rlm_ldap: user tkiziloren authorized to use remote
access" mean?

What it says - that "user tkiziloren" is "authorized to use remote
access".

> The password is not true how can a user authorized although
his/her password is false.

Because there is a difference between authorize (can this user use this
service) and authenticate (is this user who he claims to be).
Authentication fails with bad password.

Ivan Kalik
Kalik Informatika ISP