[ietf78-tech] EDUroam connect request
Rob Nagy
rob at deepdivenetworking.com
Thu Jul 8 08:48:33 PDT 2010
If they just want it for this meeting I would vote that we proxy and skip the additional SSID. Less headache in my opinion.
Alice aka Rob
Sent from my iPhone
On Jul 8, 2010, at 11:44 AM, Chris Elliott <chelliot at pobox.com> wrote:
> If we use another SSID then we won't need to proxy the requests. Not that I'm a fan of additional ssid's either.
>
> On Thu, Jul 8, 2010 at 11:38 AM, Rob Nagy <rob at deepdivenetworking.com> wrote:
> I agree as a nice to do. We should be able to radius proxy by realm for people who want to use eduroam credentials. The issue we couldn't probably port to Beijing is that I don't believe we could limit devices per user with a radius proxy realm(have to double check). But for this meeting it should be a fairly easy endeavor, time allowing.
>
> I will do additional research in how we could do it with freeradius.
>
> Rob
>
> Sent from my iPhone
>
> On Jul 8, 2010, at 11:19 AM, joel jaeggli <joelja at bogus.com> wrote:
>
> > This sort of dovetails with my observation about using open-id auth as
> > an option for the portal...
> >
> > personally I'm adverse to simply creating more ssids, but not adverse to
> > the idea of enabling authentication against additional systems.
> >
> > On 2010-07-08 08:06, Jim Martin wrote:
> >>
> >> On Jul 8, 2010, at 10:59 AM, Geert Jan de Groot wrote:
> >>
> >>> It's not my call to make, I'm not sure if the 1252's
> >>> can handle the additional config (but should, yes?),
> >>> and I promised I'd forward the request to the list to see what you think?
> >>
> >>
> >> I'd like to put this on the "Nice to do" list....
> >>
> >> That is, if we have cycles and find that we can do it (logistically and technically), then it's a good thing to do.
> >>
> >> However, if we're slammed or it hits any snags, it will be delayed or dropped.
> >>
> >> Paul, are you ok with that?
> >>
> >> On the technical side, would we have a separate (offsite) radius server configured for that one SSID, or would we relay the request (based upon realm or something) from our radius server to theirs?
> >>
> >> - Jim
> >>
> >>
> >>
> >>
> >> _______________________________________________
> >> ietf78-tech mailing list
> >> ietf78-tech at daedelus.com
> >> http://www.daedelus.com/mailman/listinfo/ietf78-tech
> >
> > _______________________________________________
> > ietf78-tech mailing list
> > ietf78-tech at daedelus.com
> > http://www.daedelus.com/mailman/listinfo/ietf78-tech
> _______________________________________________
> ietf78-tech mailing list
> ietf78-tech at daedelus.com
> http://www.daedelus.com/mailman/listinfo/ietf78-tech
>
>
>
> --
> Chris Elliott
> chelliot at pobox.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.daedelus.com/pipermail/ietf78-tech/attachments/20100708/7443abc4/attachment.html
More information about the ietf78-tech
mailing list