Subject: [eap] Issue 46: Passthrough clarification

From: [email-masked] (Bernard Aboba)
Date: Wed, 27 Nov 2002 16:39:15 -0800 (PST)

Issue 46: Passthrough clarification
Submitter: Bernard Aboba
Submitter email address: [email-masked]
Date first submitted: November 25, 2002
Reference:
Document: RFC2284bis-07
Comment type: T
Priority: S
Section:  2
Rationale/Explanation of issue:

There is some confusion about whether a AAA Server is
always required for use with EAP and whether an
Authenticator MUST be a "passthrough" for all traffic
or no traffic.

Insert the following paragraph in Section 2:

"Since a backend authentication server is optional,
an Authenticator MAY implement one or more authentication
methods locally in order to authenticate local users.
An Authenticator MAY act as a "pass through" for non-local
users and authentication methods it does not implement,
while at the same time authenticating local users with native methods."