Apologies for the delayed response.
>>>The question IMHO is: there are many inner EAP methods specified
>>> already, and they don't typically specify or signal most of the error
>>> conditions below to the EAP peer. The TEAP document can't impose change
>>> on all those inner methods; they are wha
Hi,
> Ok, there is a misunderstanding here. What I mean is the EAP server not
> trusting the ID Management System. That might seem a bit odd, but imagine
> an EAP server trying to authenticate Kerberos against a remote KDC for
> example.
That's indeed a different meaning from what I thought it wo