Session-Timeout in Access-Challenge (that contains EAP-Message)
Gong Cheng
chengg11 at yahoo.com
Wed Jul 8 20:37:48 CEST 2009
Just checked hostapd and it seems to implement this too:
hostapd/ieee802_1x.c:
"
case RADIUS_CODE_ACCESS_CHALLENGE:
sm->eap_if->aaaEapReq = TRUE;
if (session_timeout_set) {
/* RFC 2869, Ch. 2.3.2; RFC 3580, Ch. 3.17 */
sm->eap_if->aaaMethodTimeout = session_timeout;
"
Gong Cheng wrote:
>
> Hi Alan, thanks for the answer. (and thanks to David too).
> I can't seem to find 2.1.7 yet, but I will keep this in mind.
>
> Just as an FYI, I do see commercial NAS code that implements this.
>
>
> Alan DeKok-2 wrote:
>>
>> Gong Cheng wrote:
>>> Hi,
>>> I wonder if there is a way
>>> - not to include "Session-Timeout" value intended for Access-Accept in
>>> Access-Challenge messages?
>>
>> In 2.1.7, see raddb/sites-available/default. Look for
>> Access-Challenge. There is sample configuration.
>>
>>> - or to configure a different Session-Timeout value for
>>> Access-Challenges
>>> (which contain EAP-Message)?
>>>
>>> This is about the following section in RFC3579 where Session-Timeout in
>>> Access-Challenge is used to influence EAP retransmission behavior.
>>
>> I'm not sure any AP supports that.
>>
>> Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>>
>
>
--
View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-EAP-Message%29-tp24383664p24397046.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
More information about the Freeradius-Users
mailing list