Artur Hecker schrieb:

> we naively try to specify EAP-Type == PEAP for user_peap
> and == TTLS for 
> user_ttls but that breaks both methods (which seems
> normal since this 
> EAP-Type definition is not correct for the internal EAP
> method which 
> however uses the same user name).

Why not almost just as naively do the check vice versa:
If it's user_ttls and EAP-Type == PEAP, set Auth-Type
explicitly to reject?

         Regards,
                   Stefan
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to