about eap_handler

[Alan DeKok]

blue_11j at yahoo.co.jp wrote:
> if radiusd will be not received
> next EAP packet(except EAP-Identiry) forever, 
> When is the eap_handler deleted from the eaplist and freed ?

  See the source code.  eaplist_find() will remove expired sessions from
the list.

> will radiusd use too large memory by
> 'Dos attack using EAP-Identiry' ?

  It is difficult to tell the difference between a lot of people trying
to log in, and a DoS attack.  If you have suggestions...

  Alan DeKok.