IETF Logo Mail Archive

Re: [radext] Issue with draft-ietf-radext-radius-fragmentation, pre-authorization phase and authentication attributes.

Alejandro Perez Mendez <alex@um.es> Mon, 03 March 2014 10:01 UTC

Return-Path: <alex@um.es>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05E1C1A0DDE for <radext@ietfa.amsl.com>; Mon, 3 Mar 2014 02:01:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.148
X-Spam-Level:
X-Spam-Status: No, score=-3.148 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RaOMOo02_Xy8 for <radext@ietfa.amsl.com>; Mon, 3 Mar 2014 02:01:38 -0800 (PST)
Received: from xenon21.um.es (xenon21.um.es [155.54.212.161]) by ietfa.amsl.com (Postfix) with ESMTP id 70AEC1A0DD2 for <radext@ietf.org>; Mon, 3 Mar 2014 02:01:38 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by xenon21.um.es (Postfix) with ESMTP id A77743F8C8; Mon, 3 Mar 2014 11:01:34 +0100 (CET)
X-Virus-Scanned: by antispam in UMU at xenon21.um.es
Received: from xenon21.um.es ([127.0.0.1]) by localhost (xenon21.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id AdoMXlqwQEHn; Mon, 3 Mar 2014 11:01:34 +0100 (CET)
Received: from [155.54.205.49] (inf-205-49.inf.um.es [155.54.205.49]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: alex) by xenon21.um.es (Postfix) with ESMTPSA id 2DE653F8C7; Mon, 3 Mar 2014 11:01:32 +0100 (CET)
Message-ID: <531452FC.6090704@um.es>
Date: Mon, 03 Mar 2014 11:01:32 +0100
From: Alejandro Perez Mendez <alex@um.es>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Alan DeKok <aland@deployingradius.com>, Sam Hartman <hartmans@painless-security.com>
References: <53107CBB.3020407@um.es> <53134D64.7080304@restena.lu> <53143367.6090001@um.es> <tsl61nvei02.fsf@mit.edu> <5314505E.3010200@deployingradius.com>
In-Reply-To: <5314505E.3010200@deployingradius.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/radext/K_bF3SVbR7vrkt3WmWU3i7p5Phc
Cc: Stefan Winter <stefan.winter@restena.lu>, "radext@ietf.org" <radext@ietf.org>
Subject: Re: [radext] Issue with draft-ietf-radext-radius-fragmentation, pre-authorization phase and authentication attributes.
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Mar 2014 10:01:42 -0000

El 03/03/14 10:50, Alan DeKok escribió:
>    An alternative would be to send an EAP-Message containing a NAK
> containing no data.
>
>    i.e. 0x02000403
>
>    It's EAP-Message, which satisfies the existing requirements.  An
> intermediate proxy shouldn't really be snooping on the EAP conversation,
> so it shouldn't care about the contents of EAP-Message.
>
>    Anyone else looking at the contents should be clear that it's not a
> working EAP session.

What would be wrong with using EAP-Start message (i.e. empty EAP-Message 
attribute).


>    Alan DeKok.

v2.30.2 | Report a Bug | By Email | System Status