claude-botandClaude Opus 5.5
f1d0dde23b
FreeRADIUS 3.2 (2 replicas, non-root, read-only root) terminates EAP-TTLS for radius.renner.uno and proxies inner PAP to ak-outpost-8021x-radius. Inner post-auth passes standard Tunnel-* through, translates Cisco-AV-Pair dot1x-vlan=<id> into Tunnel-*, strips Cisco-AV-Pair and rejects an Accept without VLAN; doing this in the inner tunnel makes TTLS answer with EAP-Failure. Home server does not require Message-Authenticator (outpost rejects lack it). Accounting is answered locally. Adds radius-lb (10.2.99.91/fd99::91), CNPs, image automation, replica alerts and tests/radius/run.sh (Docker + eapol_test against a mock outpost). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
5 lines
136 B
Docker
5 lines
136 B
Docker
FROM debian:trixie-slim
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends eapoltest \
|
|
&& rm -rf /var/lib/apt/lists/*
|