Clarifications on expected behavior when using proxy-inner-tunnel (3.x)

[Brian Julin]

Alan DeKok wrote:
> On Nov 6, 2015, at 3:36 PM, Brian Julin <BJulin at clarku.edu> wrote:
> > That being the case, I don't see a way other than the (deprecated)
> > use_tunneled_reply to pop state out of the inner tunnel

>  What doe that mean?

Nevermind I figured it out: In post-proxy, before (but not after) the call to eap,
you can get inner attributes out of the inner reply and manually save them
to reply:, then in post-auth save those from reply to session-state:.

So you can indeed make do without use_tunneled_reply turned on.