Authentication problems depending on connection type
Alan DeKok
aland at deployingradius.com
Fri Oct 24 19:42:50 CEST 2014
Alex Gregory wrote:
> I was under the impression that, with EAP, it encapsulates the password in the EAP transmission.
Yes.
> If I can only do EAP, then that means it can never send it in the clear.
No.
EAP-TTLS uses EAP, TLS for security, and sends a PAP password inside
of the TLS tunnel. So the password is in the clear.
Alan DeKok.
More information about the Freeradius-Users
mailing list