src/modules/rlm_eap: Which types are stable?
Alan DeKok
aland at deployingradius.com
Tue Oct 13 20:59:40 CEST 2015
On Oct 13, 2015, at 1:16 PM, Jouni Malinen <jkmalinen at gmail.com> wrote:
>
> On Tue, Oct 13, 2015 at 3:24 PM, Alan DeKok <aland at deployingradius.com> wrote:
>> EAP-IKE is rarely used. But should work.
>
> Is this still based on the libeap-ikev2 from 2006? If so, please note
> that I don't think it is compliant with EAP-IKEv2 as defined in RFC
> 5106.
Done.
> I used to have some workaround code in wpa_supplicant to allow
> interop testing with this implementation (under #ifdef CCNS_PL), but I
> dropped those last year since there does not seem to be any point in
> maintaining non-compliant implementation. I would discourage any
> deployments based on this old implementation unless those compliancy
> issues with the published RFC are first addressed. As such, I hope
> that this does not get documented as "working" in FreeRADIUS..
Good point. I think it's worth removing. The only consumer I'm aware of is StrongSWAN, and alternatives for it exist.
Alan DeKok.
More information about the Freeradius-Users
mailing list