EAP TEAP support

[stgmsa]

Description

Adds EAP TEAP Support

Impacts

Adds EAP TEAP support

• changed default EAP configurations
• adds default teap configuration
• adds TEAP configuration in FreeRADIUS EAP module
• adds chrooted_mschap_mppe for TEAP

NEW Package(s) required

FreeRADIUS 3.2.6+ (already included)

Delete branch after merge

YES

Checklist

• Document the feature
• Add OpenAPI specification
• Add unit tests
• Add acceptance tests (TestLink)

Enhancements

TEAP support

[bitbin]

FYI, FreeRADIUS made a number of changes to for TEAP support and how it is configured in their v3.2.x branch which would be great to have included when PF releases this feature.
FreeRADIUS/freeradius-server@ab98c3d
FreeRADIUS/freeradius-server@170e89e
FreeRADIUS/freeradius-server@0bef213
FreeRADIUS/freeradius-server@01d348e

Some background discussion is on their mailing list:
https://lists.freeradius.org/pipermail/freeradius-users/2024-December/105114.html
https://lists.freeradius.org/pipermail/freeradius-users/2024-December/105114.html

Also, there were some changes to wpa_supplicant
https://lists.infradead.org/pipermail/hostap/2024-December/043162.html

Thank you

[stgmsa]

FYI, FreeRADIUS made a number of changes to for TEAP support and how it is configured in their v3.2.x branch which would be great to have included when PF releases this feature. FreeRADIUS/freeradius-server@ab98c3d FreeRADIUS/freeradius-server@170e89e FreeRADIUS/freeradius-server@0bef213 FreeRADIUS/freeradius-server@01d348e

Some background discussion is on their mailing list: https://lists.freeradius.org/pipermail/freeradius-users/2024-December/105114.html https://lists.freeradius.org/pipermail/freeradius-users/2024-December/105114.html

Also, there were some changes to wpa_supplicant https://lists.infradead.org/pipermail/hostap/2024-December/043162.html

Thank you

We've been testing and verifying TEAP support, and decided not to include TEAP support in v14.1 release due to some test failures during R&D related to FreeRADIUS server, wpa_supplicant and eapol_test.

We'll re-verify the use cases and have TEAP feature release at the best time.

Thank you