<html><head><META http-equiv="Content-Type" content="text/html;charset=utf-8"></head><body>Hello<div><br></div><div>The file dependency is from the goodies directory and i have not found a way to do without.</div><div><br></div><div>Basically you will see much lower load on ldap, (around 10-20 times less) depending on eap type used.</div><div><br></div><div>Hope that helped</div><div><br></div><div><br><br>Sent from my iPhone using IBM Verse<meta name="viewport" content="initial-scale=1.1"><br><br><hr>On 09.01.2019, 18:55:54, christian@errxtx.net wrote:<br><br>From: christian@errxtx.net<br>To: alfred.reibenschuh_v-tservices@at.ibm.com<br>Cc: radiator@lists.open.com.au<br>Date: 09.01.2019, 18:55:54<br>Subject: Re: [RADIATOR] connection / protocol failures and policy bevavior (decouple LDAP2 from EAP?)<br><br><div id="MaaS360PIMSDKOriginalMessageId"><div> <div> Hi, </div> <br> <div class="gmail_quote"> <div> On Wed, Jan 9, 2019 at 1:13 PM Alfred Reibenschuh < <a href="mailto:alfred.reibenschuh_v-tservices@at.ibm.com">alfred.reibenschuh_v-tservices@at.ibm.com</a>> wrote: </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div class="m_6782191777327913777m_-2740588331097672466m_-2298592265358417466gmail-m_2487111300581358671socmaildefaultfont" style="font-family:Arial,Helvetica,sans-serif;font-size:10.5pt"> <div> due to the different behaviours of the 802.1x clients we have decupled eap from ldap like this: </div> <div> </div> <div> --- </div> <div> <AuthBy GROUP> <br>AuthByPolicy ContinueWhileAccept <div> <AuthBy FILE> <br> Filename %D/users.eaptls <br> EAPType TLS <br> EAPTLS_NoCheckId </div> <div> .... <br> </AuthBy> <div> <AuthBy LDAP2> </div> <div> NoEAP </div> <div> ..... </div> <div> </AuthBy> </div> </div> </div> </div> </blockquote> </div> <div> <br> </div> <div> interesting solution - I wonder if the file dependency is really necessary and the "decoupling" needed. </div> <div> <br> </div> <div> Thanks Alfred, I will play around with that! <br> </div> <div> <br> </div> <div class="m_6782191777327913777m_-2740588331097672466m_-2298592265358417466gmail_signature"> <div> <div> <div> <div> <div> -- </div> <div> Christian </div> </div> </div> </div> </div> </div></div></div></div><BR>
</body></html>