I'm new here so please go easy on me if this is a dumb question. Is there a way(or why you shouldn't/couldn't) to provide the PMK(perhaps via MS-MPPE-Recv-Key) instead of a cleartext Tunnel-Password as a radius response? It would solve the less-than-ideal situation of storing and transmitting PSKs in cleartext or reversible encryption. I tried as a test just sending the PMK or PTK back as MS-MPPE-Recv-Key as in EAP but seems that didn't do the trick. -Daniel _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap