[EMAIL PROTECTED] wrote:
> > Did you set "User-Name = novelluser" in the *reply* for the tunneled
> > session?
>
> Hmmmm...I did not explicitly do this. How to?
Set it as a reply attribute?
user blah-blah = blah
User-Name = `%{User-Name}`
> > You can verify that, independent of EAP, but using "radtest" with
> > the name & password of the tunneled user.
>
> I'm testing this now, but don't see the same "Access-Accept" message in
> the debug output. Guess I'm still missing something.
You will see the INNER TUNNEL Access-Accept. The reply attributes
in that Access accept are the ones which will be copied to the outer
tunnel, when TTLS is used.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
