[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: FreeRadius unauthorized access
From:       Arran Cudbard-Bell <a.cudbardb () freeradius ! org>
Date:       2014-01-31 22:16:02
Message-ID: D90D1E2C-A966-4DFB-A4C0-F2FB09413372 () freeradius ! org
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


On 31 Jan 2014, at 22:03, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:

> Be very careful about the sorts of enforcing suggested... They can cause issues \
> with certain types of authentication. .. eg EAP-TLS where there is no innerID...

ok

if (User-Name && outer.User-Name && (User-Name == outer.User-Name)) 

> )

> or eduroam where you don't know the real innerID of visitors. 

Wouldn't be going through the inner server. There's no way you can enforce this from \
the outer server.

Arran Cudbard-Bell <a.cudbardb@freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2


["signature.asc" (signature.asc)]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
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=Rrzs
-----END PGP SIGNATURE-----


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[prev in list] [next in list] [prev in thread] [next in thread]