Avi Lior wrote:
An intermediate proxy when seeing Authentication/Authorization traffic can't correlated it to a specific user when methods such as EAP are being used.
The only thing a intermediary can do is use class to correlate an accounting stream with a authentication stream. But it can't correlate that to a specific user.
So if iPass wants to limit how many times John logs in (and they do) then they would not be able to do so when certain EAP methods are being used.
Agreed. This is for me the prime reason why CUI is needed.
--Jari
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>