eap Mailing List: Re: Issue 199: Full authenticator SM issue

[Jari Arkko (jari.arkko]

Ashwin Palekar wrote:
> This is the case where EAP is forwarded to first RADIUS server; which
> tries to negotiate EAP methods with peer. If the client NAKs all the EAP
> methods proposed, the first RADIUS server forwards it to yet another
> RADIUS server.

Yes.

I have looked at the state machine again, and now I believe
it does not support this (and that is OK).

The way that I read the state machines is that the full
machine is for the NAS that either does the authentication
itself or forwards it to a RADIUS server. But the RADIUS
server side should follow only the backend machine. And
the backend machine does not have a transition to send
the authentication somewhere else. Pasi, John, & co --
is this your interpretation too?

--Jari