From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 14 Feb 2013 16:56:34 +0000 (-0500)
Subject: Update the example to show EAP-Key-Name
X-Git-Tag: release_2_2_1~173
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=74b4dbb13a53ea3935fe0503cb509a6d9e6e60f0;p=thirdparty%2Ffreeradius-server.git

Update the example to show EAP-Key-Name
---

diff --git a/raddb/sites-available/default b/raddb/sites-available/default
index 1d13543509e..1372649822d 100644
--- a/raddb/sites-available/default
+++ b/raddb/sites-available/default
@@ -542,6 +542,16 @@ post-auth {
 #	       Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}"
 #	}
 
+	#  MacSEC requires the use of EAP-Key-Name.  However, we don't
+	#  want to send it for all EAP sessions.  Therefore, the EAP
+	#  modules put required data into the EAP-Session-Id attribute.
+	#  This attribute is never put into a packet.
+	#
+	#  Uncomment the next few lines to copy the required data into
+	#  the EAP-Key-Name attribute
+#	update reply {
+#		EAP-Key-Name := "%{reply:EAP-Session-Id}"
+#	}
 
 	#  If the WiMAX module did it's work, you may want to do more
 	#  things here, like delete the MS-MPPE-*-Key attributes.