Working around broken EAP client
Alan DeKok
aland at deployingradius.com
Tue Jun 11 14:59:55 CEST 2013
Gordon Ross wrote:
> [mschap] ERROR: User-Name (68983 at phone.cam.ac.uk) is not the same as MS-CHAP Name (68983) from EAP-MSCHAPv2
It appears that behavior is allowed. I've had discussions with the
people doing the standards. And the MS-CHAP identity has *no* relation
to the EAP-Identity.
It's insane, but that's how it works.
I think for v2.2.1, it's best to make that check configurable, instead
of an error.
Alan DeKok.
More information about the Freeradius-Users
mailing list