Artur Hecker schrieb:
> we naively try to specify EAP-Type == PEAP for user_peap
> and == TTLS for
> user_ttls but that breaks both methods (which seems
> normal since this
> EAP-Type definition is not correct for the internal EAP
> method which
> however uses the same user name).
Why not almost just as naively do the check vice versa:
If it's user_ttls and EAP-Type == PEAP, set Auth-Type
explicitly to reject?
Regards,
Stefan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html