eap_ttls not setting 'FreeRADIUS-Proxied-To'

[Alan DeKok]

On Jan 12, 2016, at 7:04 PM, David Lord <d.lord at its.uq.edu.au> wrote:
> If one virtual server (SP) uses Proxy-To-Realm to forward to a 2nd virtual server (IDP), which uses an eap module with peap & ttls “virtual_server” set to a 3rd virtual server (inner), is there a reliable way to forward attributes from #3 to #1?

  use_tunneled_reply in the EAP configuration.  Then, the server *already* uses the reply from the proxy as the basis for it's reply to the NAS.

  i.e. it Just Does The Right Thing.

  Alan DeKok.