use_tunneled_reply

[Alan DeKok]

-ragan_davis at colstate.edu wrote:
> >  Did you set "User-Name = novelluser" in the *reply* for the tunneled
> > session?
> 
> Hmmmm...I did not explicitly do this.  How to?

  Set it as a reply attribute?

user  blah-blah = blah
      User-Name = `%{User-Name}`

> >  You can verify that, independent of EAP, but using "radtest" with
> > the name & password of the tunneled user.
> 
> I'm testing this now, but don't see the same "Access-Accept" message in
> the debug output.  Guess I'm still missing something.

  You will see the INNER TUNNEL Access-Accept.  The reply attributes
in that Access accept are the ones which will be copied to the outer
tunnel, when TTLS is used.

  Alan DeKok.