> so, in inner-tunnel post-auth, set "outer.reply" > to be whatever you want.. you can then, in the > outer layer, query/check or use that reply.
There's an additional round trip after the failure which is why Phil said it needs to be saved. I had a patch to save/restore it; but, it needs rework and I don't have the time to do it now.. :-( - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

