Expiration and EAP verification question

[Alan DeKok]

WorkingMan wrote:
> Can you give me an example on how to always accept connection on EAP-* 
> authentication (it will be password based from xauth-eap from strongswan) 

  No.  EAP doesn't (and can't) work that way.

> but at the same time still honour Expiration logic? I am not sure  what to 
> do it (or what to look for). I have been trying different settings for a 
> week now without success. 

  Because EAP is designed to make this impossible.

  Alan DeKok.