Aside from setting Reject/Accept, that (use of >1 module for a given auth method) is probably the single valid use. That use would be better supported using another method than conflating module instance names with algorithm names.

I'm not quite understand above suggestion/comments..


That is probably because the EAP "inner" request does not have the NAS-Id and NAS-Port-Type attribute. Set "copy_request_to_tunnel = yes" on the EAP method(s) you're using.

I will try that one... thanks..

--haizam


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to