EAP/PEAP inner identity and rlm_exec

[Kolbjørn Barmen]

I'm trying to use a selfmade script to decide VLAN-attributes for 
EAP/PEAP users:

DEFAULT Realm == realm.org
  Tunnel-Type = VLAN,
  Tunnel-Medium-Type = IEEE-802,
  Tunnel-Private-Group-Id = `%{exec:/usr/sbin/ldap2vlan %{User-Name}`

However, it only works for the so called "outter" identity.
Any tip on how to make it work for the "inner" identity instead?

-- 
Kolbjørn Barmen
UNINETT Driftsenter