Hi,
Nathan McDavit-Van Fleet <[email protected]> wrote:
>
> Is there anyway to have Freeradius log whether a connection is either PEAP
> or TTLS in the log file? Both of them indicated that it is through a TLS
> tunnel with no indication of the differences. FYI they are coming through
> the same NAS server.
>
As far as I know, only if the EAP part terminates on your RADIUS server,
for use I use (on a EAP virtual server) something like:
update outer.control {
EAP-Type := "%{EAP-Type}"
}
Then on the outside layer you should find in post-auth that
'%{control:EAP-Type}' has what you are after.
It's harder to get the phase2 auth (also worth doing) out to the
outer most post-auth section using a similar method, but possible.
Cheers
--
Alexander Clouter
.sigmonster says: boy, n:
A noise with dirt on it.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
