Arran Cudbard-Bell wrote: > So the eap module extracts the attributes encoded in the eap message ? I > can see that working for EAP GTC and EAP PAP but not MschapV2 ?
It works for GTC, PAP, and MS-CHAPv2. The server can terminate PEAP, and proxy the inner EAP-MSCHAPv2 session as plain MS-CHAPv2. With the new virtual server support, it's now possible to have the inner tunnel session run through it's own virtual server, independent of the outer tunnel session. Just set "Virtual-Server = foo" via "update control", and the inner tunnel session will be run through "server foo". 30 lines of code changed: incredible new flexibility. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
