PacketFence - BTS - PacketFence
View Issue Details
0001536PacketFence802.1xpublic2012-08-31 13:092015-02-13 15:42
fgaudreault 
 
normalminoralways
closedopen 
3.5.0 
 
0001536: EAP-TTLS is not seen as Wireless-802.11-EAP
Here is the thing, when you do EAP-TTLS authentication, there is no EAP-Type set in the inner tunnel since the authentication is plaintext.

So instead of seeing the node as Wireless-802.11-EAP, we see it as Wireless-802.11-NoEAP, which is not true. This is problematic since we permit anonymous outer identity.
I fixed this in a hackish fashion at the customer site by copying EAP-Message for the REPLY attributes, to the REQUEST attributes. I then modified the _parseRequest sub to add EAP-Message to the condition to set eap_type = 1.
No tags attached.
Issue History
2012-08-31 13:09fgaudreaultNew Issue
2012-09-10 14:28fgaudreaultNote Added: 0003033
2012-10-19 11:26fgaudreaultTarget Version => general
2015-02-13 15:42lmunroNote Added: 0003816
2015-02-13 15:42lmunroStatusnew => closed

Notes
(0003033)
fgaudreault   
2012-09-10 14:28   
I think we should have more than just Wireless-802.11-EAP/NoEAP. We should be able to specify the EAP-Type, something like:
- Wireless-802.11-NoEAP
- Wireless-802.11-PEAP
- Wireless-802.11-TLS
- Wireless-802.11-TTLS
(0003816)
lmunro   
2015-02-13 15:42   
These bugs have been sitting untouched since 2012.
Closing them and possibly reopening in github tracker where relevant.