Re: [Pana] draft-ietf-pana-statemachine issue

[Jari Arkko <[e-mail]>]

Yoshihiro,

I talked to Pasi about this, and he said:

> Doesn't quite work -- EAP state machine processes one request
> at a time. Once you've given it a request to process by setting 
> eapReq, you can't set eapReq again before the request has
> been processed and eapReq has been cleared (well, in theory you 
> could set eapReq again, but it doesn't do what you'd expect).
>   

Which is true as far as I can tell. I'm sure you could fix this, and
then we'd have to see what the next problem is, if any.

But I have a higher level question. Do we really want to do this? We
knew from the start that making the PANA state machine deal with the
loss of EAP message in an integrated manner is going to take a
relatively large change to the state machine, and getting this right
could take time. The other alternative is simpler, and I'm not sure the
end result is really that different. (In any case, at the end of the
day, other people on the link can get your authentication process
stopped, if they want.)

Jari