Re: [RADIATOR] max reauthentication

2014-03-24 Thread Sami Keski-Kasari
Hello Judy, I have one addition to Hugh's reply. All NASses are doing anything if you doesn't specify also Termination-Action attribute. The Line below should do the trick with most of NASes AddToReply Session-Timeout = nn, Termination-Action=1 Termination-Action=1 means re-authentication. Bes

[RADIATOR] Problems with radiator to radsecproxy TLS connections

2014-03-24 Thread Elmar Dreher
Hello all, i am systemadministrator for eduroam at the university of Konstanz. We are using radiator and radsecproxy: 1. Radiator is hosted in an Application Zone 2. Radsecproxy is hosted in a DMZ and connected to the DFN for eduroam purposes 3. OS on both environments is Ubuntu 12.04 The setup i

[RADIATOR] test

2014-03-24 Thread Qiu, Dennis
Please disregard this email. Dennis Qiu Information Systems Davis Polk & Wardwell LLP 450 Lexington Avenue New York, NY 10017 212 450 5651 tel dennis@davispolk.com [Davis Polk] Confidentiality Note: This email is intended only

[RADIATOR] test

2014-03-24 Thread Qiu, Dennis
Please disregard this email. Sorry for the noise. Dennis Qiu Information Systems Davis Polk & Wardwell LLP 450 Lexington Avenue New York, NY 10017 212 450 5651 tel dennis@davispolk.com [Davis Polk] Confidentiality Note: This e

[RADIATOR] CRLs not working with EAP TLS

2014-03-24 Thread Markus Moeller
Hi I have setup EAP-TLS for wired 802.1x using CRLCheck, but I noticed that despite having the certificate serial number in the CRL Radiator still accepts the presented certificate ( I also can see Radiator re-read the CRL file) . I was trying to verify that the serial numbers match using the

Re: [RADIATOR] CRLs not working with EAP TLS

2014-03-24 Thread Markus Moeller
BTW I use perl -MNet::SSLeay -E 'say Net::SSLeay::SSLeay_version()' OpenSSL 1.0.1e 11 Feb 2013 From: Markus Moeller Sent: Monday, March 24, 2014 9:59 PM To: radiator@open.com.au Subject: [RADIATOR] CRLs not working with EAP TLS Hi I have setup EAP-TLS for wired 802.1x using CRLCheck, but I