eap Mailing List: RE: Issue 189: Handling of the identity response

[John Vollbrecht (jrv]

--On Friday, October 31, 2003 2:50 PM -0800 Joseph Salowey 
<jsalowey [at] cisco.com> wrote:

> >
> > The first case - where the method uses the Identity Response
> > data from the
> > previous request as an identity does not seem right.  In
> > thinking about it
> > I am not sure it actually happens in any implementations [as
> > opposed to
> > selecting the method instance based on the Response Data].
>
> [Joe] I was under the impression that EAP-OTP required the identity.
They do require and identity, but it is not clear it is the EAP identity 
response but the identity as processed by the NAS and (if necessary) 
inserted in the RADIUS identity attribute.  I think this is the same as MD5.

This is a bit fuzzy, and I seem to recall some conversation about this. 
However, I don't see how it would work if, for example, something like 
Broker/joe [at] company.com were used.  Certainly the user would not understand 
"Broker".

-- John