wpa/wpa2 on logs

[Arran Cudbard-Bell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 14/10/2009 13:34, Sergio Belkin wrote:
> 2009/10/14 Arran Cudbard-Bell <A.Cudbard-Bell at sussex.ac.uk>:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 13/10/2009 18:53, Sergio Belkin wrote:
>>> Hi,
>>>
>>> Is there a way to log if a supplicant is using either wpa or wpa2?
>>>
>>> Thanks in advance!
>>>
>>
>> No. Information about the security association is not contained in EAP authentication attempts.
>>
> 
> Thanks Arran! At least it's good to know that

Hmm, just thought, some vendors may include the information in the RADIUS packet as VSAs (Vendor Specific Attributes).

Might be worth running the server in debugging mode (radiusd -X) and see what your wireless controllers
are actually sending in Access-Request packets.

So although you won't get the info in the EAP Tunnel, you may find it's available in the RADIUS Access-request
packets.

Arran

- -- 
Arran Cudbard-Bell <A.Cudbard-Bell at sussex.ac.uk>,
Systems Administrator (AAA),
Infrastructure Services (IT Services),
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT
DDI+FAX: +44 1273 873900 | INT: 3900
GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrVyG0ACgkQcaklux5oVKIPEACfXH4XiM1UDHI1l4bVndmE79Qy
2+wAoJHllySDY05ThkrYaVhEDmyV0076
=mWSt
-----END PGP SIGNATURE-----