EAP-TTLS not working

[Alan DeKok]

On Oct 28, 2016, at 6:58 AM, Marlen Caemmerer <caemmerer at ash-berlin.eu> wrote:
> 
> What would you recommend to let FreeRadius authenticate the user? LDAP
> or users file or something else? 

  Yes.  That's what databases are for.

> Thanks :). So this means I configure the default virtual server to do
> TTLS and the inner virtual server to do PAP? 

  That works in the default configuration.  You don't need to do anything.

> Then if I do this with rlm_perl I would write 
> 
> Auth-Type PAP {
> perl
> } 
> 
> in the inner-tunnel config. 

  That works.

> In the default config I guess I'd have to put eap in the authenticate
> section. 
> 
> Is this correct? 

  You don't need to do anything.  The default configuration works.

  Alan DeKok.