EAP-TNC supported?

[Martin Schneider]

Hi Ingo and others

>> Does anybody know about a patch or something for FreeRadius that adds
>> more stable EAP-TNC processing? I heard about a patch from FH Hannover
>> (http://tnc.inform.fh-hannover.de/wiki/index.php/Main_Page) but I
>> don't know how good this one works. Did maybe anybody of you guys play
>> with that patch?
> Yes, it is very experimental. We have done some refactoring the last
> weeks but the new version of the EAP-TNC-Patch is currently not in the
> FreeRADIUS sources. You can download it from
> http://tnc.inform.fh-hannover.de. We will modify some further aspects
> soon (such as removing the dynamic loading of NAA-TNCS.so at runtime).

Great! Thanks for that hint. I'll have a look at this soon. So you'll
want to integrate the TNC Server directly into the EAP Module, or to
be more precise, you'll add a "TNC Type Module" to the EAP module?

> You can do EAP-TNC inside EAP-TTLS without modifying the source. I
> tested it with the latest development version of wpa_supplicant. But you
> will have to modify the source if you want to to EAP-TNC inside EAP-TTLS
> _after_ another EAP-method (such as MD5).

That's good news for me!

So basically, the "only thing I need to do" when I want to perfom
EAP-TNC is to create a IMC/IMV pair and integrate the IMC to
wpa_supplicant and the IMV to Free Radius?

Regards
Martin