WPA Enterprise, 802.1X, Freeradius, EAP & Kerberos

[John Dennis]

Arran Cudbard-Bell wrote:
> On 8/5/09 21:11, Alan DeKok wrote:
>>    You can't.  But you can use a KDC as an authentication oracle.
>>
>> RADIUS: Is this PAP password OK?
>> KDC: yes/no.
> 
> Does it request a TGT and then see if it can decrypt it ?

Yes, that's the basic process, it also validates the KDC.

-- 
John Dennis <jdennis at redhat.com>

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/