Reply-message and supplicant

[Arran Cudbard-Bell]

On 5/6/09 15:21, A.L.M.Buxey at lboro.ac.uk wrote:
> Hi,
>> Hi Sergio,
>>> Is possible that Reply-message can be seen from laptops running the supplicant?
>> Not with EAP no. You can use EAP-Notification packets, but very few supplicants display the contents to the user, and the server doesn't support their generation.
>
> which is why rather useful messages can be sent from RADIUS server to RADIUS
> server so that admins can see what is going on but the users dont get to
> see such information

No they can't. Reply-Messages are prohibited in packets containing EAP-Message attributes.

Which is why I specified an alternate VSA :P

Arran

-- 
Arran Cudbard-Bell (A.Cudbard-Bell at sussex.ac.uk),
Authentication, Authorisation and Accounting Officer,
Infrastructure Services (IT Services),
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT
DDI+FAX: +44 1273 873900 | INT: 3900
GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2