Session-Timeout in Access-Challenge (that contains EAP-Message)

Gong Cheng chengg11 at yahoo.com
Wed Jul 8 20:37:48 CEST 2009


Just checked hostapd and it seems to implement this too:

hostapd/ieee802_1x.c:

"
        case RADIUS_CODE_ACCESS_CHALLENGE:
                sm->eap_if->aaaEapReq = TRUE;
                if (session_timeout_set) {
                        /* RFC 2869, Ch. 2.3.2; RFC 3580, Ch. 3.17 */
                        sm->eap_if->aaaMethodTimeout = session_timeout;
"


Gong Cheng wrote:
> 
> Hi Alan, thanks for the answer. (and thanks to David too).
> I can't seem to find 2.1.7 yet, but I will keep this in mind.
> 
> Just as an FYI, I do see commercial NAS code that implements this.
> 
> 
> Alan DeKok-2 wrote:
>> 
>> Gong Cheng wrote:
>>> Hi, 
>>>     I wonder if there is  a way
>>> - not to include "Session-Timeout" value intended for Access-Accept in
>>> Access-Challenge messages?
>> 
>>   In 2.1.7, see raddb/sites-available/default.  Look for
>> Access-Challenge.  There is sample configuration.
>> 
>>> - or to configure a different Session-Timeout value for
>>> Access-Challenges
>>> (which contain EAP-Message)?
>>> 
>>> This is about the following section in RFC3579 where Session-Timeout in
>>> Access-Challenge is used to influence EAP retransmission behavior.
>> 
>>   I'm not sure any AP supports that.
>> 
>>   Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>> 
>> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Session-Timeout-in-Access-Challenge-%28that-contains-EAP-Message%29-tp24383664p24397046.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.




More information about the Freeradius-Users mailing list