suppress bad error for EAP-FAST

instead of printing a message saying to ignore it

diff --git a/src/modules/rlm_eap/lib/base/eap_tls.c b/src/modules/rlm_eap/lib/base/eap_tls.c
index 87513ed3c5cb91d52026ef12367028c576ba04fc..7836b0dc89a3cc171dd33bfc04ac458915921136 100644 (file)
--- a/src/modules/rlm_eap/lib/base/eap_tls.c
+++ b/src/modules/rlm_eap/lib/base/eap_tls.c
@@ -292,7 +292,8 @@ int eap_tls_success(eap_session_t *eap_session)
         */
        if (tls_session->prf_label) {
                eap_tls_gen_mppe_keys(eap_session->request, tls_session->ssl, tls_session->prf_label);
-       } else {
+
+       } else if (eap_session->type != FR_EAP_FAST) {
                RWDEBUG("Not adding MPPE keys because there is no PRF label");
        }
 

diff --git a/src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c b/src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c
index fa1b2b1e31f4366af98e05030f90cf84b0784f15..09d28046b993a00e34fce6867e6b99ca5aeac5c5 100644 (file)
--- a/src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c
+++ b/src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c
@@ -439,7 +439,6 @@ static rlm_rcode_t mod_process(void *arg, eap_session_t *eap_session)
                 *      Success: Automatically return MPPE keys.
                 */
        case FR_CODE_ACCESS_ACCEPT:
-               RDEBUG("Note that the 'missing PRF label' message below is harmless. Please ignore it.");
                if (eap_tls_success(eap_session) < 0) return RLM_MODULE_FAIL;
                return RLM_MODULE_OK;