The EAP-TLS packet will contain more data than we can process

[Alan Dekok]

Jan Schermer / ET NETERA wrote:
> I'm setting up a Mikrotik wireless AP with a freeradius server behind it
> and EAP-TLS, client connects "fine" (those errors are meaningless,
> right? can I get rid of them?):

  Upgrade to 1.1.6.

> but after a while, the connection is renegotiated (maybe because of weak
> signal), but then it starts failing:
...
> Tue May 29 12:02:44 2007 : Error: rlm_eap_tls: The EAP-TLS packet will
> contain more data than we can process.

  The supplicant is tunnelling additional data inside of EAP-TLS.
FreeRADIUS doesn't support that.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog