eap Mailing List: RE: Issue 235: (Key Framework) Rewrite of Section 1

[Alper Yegin (alper.yegin]

> [Joe] Yes, there needs to be a communication between EAP, which does
> authentication, and the party(s) responsible for authorization.  There
> needs
> to be some data exported out of the EAP method to accomplish this such
as
> authenticated identity and channel binding information.  The
authorization
> piece would need to be aware of what the parties communication is
trying
> to
> do.

This should be handled by the NAS, which implements (and glues together)
EAP, EAP lower layer, AAA backend protocols.

Alper