EAP-TNC SoH Health Attributes

[Jouni Malinen]

On Mon, Nov 28, 2011 at 02:57:14PM -0500, Francois Gaudreault wrote:
> I have been able to make SoH "working" with FreeRADIUS (not NAP),
> however I found out there are not a lot of attributes populated (see
> RADIUS debug below) :

> Now, am I missing something to have the MS-Windows-Health-Status
> attributes populated (ie: SoH-MS-Windows-Health-Status = "antivirus
> error not-installed") ?  Also, Is there a way to write our own
> plugins in order to populate our own attributes?

Support for SoH is quite limited, i.e., these attributes are really just
hardcoded in src/eap_peer/tncc.c. The TNC implementation itself supports
plugins, but not for SoH use.

What kind of use case do you have in mind for SoH? It looks pretty
Microsoft specific to me and it is somewhat difficult to see good
justification for extending the minimal SoH implementation when rest of
TNC have much less OS dependent and restricted design..

-- 
Jouni Malinen                                            PGP id EFC895FA