Authentication problems depending on connection type

Alan DeKok aland at deployingradius.com
Fri Oct 24 19:42:50 CEST 2014


Alex Gregory wrote:
> I was under the impression that, with EAP, it encapsulates the password in the EAP transmission. 

  Yes.

>  If I can only do EAP, then that means it can never send it in the clear.

  No.

  EAP-TTLS uses EAP, TLS for security, and sends a PAP password inside
of the TLS tunnel.  So the password is in the clear.

  Alan DeKok.


More information about the Freeradius-Users mailing list