I tried the same config with 2.1.11 but the same result.<div><br></div><div>My config:</div><div>eap.conf-</div><div><div>default_eap_type = tls</div></div><div> tls {</div><div><div>                 certdir = ${confdir}/certs</div>
<div>                 cadir = ${confdir}/certs</div><div>                 private_key_password = whatever</div><div>                 private_key_file = ${certdir}/server.pem</div></div><div><div>                 CA_file = ${cadir}/ca.pem</div>
</div><div><div>                 dh_file = ${certdir}/dh</div><div>                 random_file = ${certdir}/random</div></div><div>                 CA_path = ${cadir}</div><div>                 check_cert_cn = %{User-Name}</div>
<div>}</div><div><br></div><div>user-</div><div><div>DEFAULT Auth-Type := EAP</div><div><br></div><div>site-enables/default-</div><div>post-auth{</div><div><div>update reply {</div><div>               Reply-Message += "%{TLS-Cert-Serial}"</div>
<div>               Reply-Message += "%{TLS-Cert-Expiration}"</div><div>               Reply-Message += "%{TLS-Cert-Subject}"</div><div>               Reply-Message += "%{TLS-Cert-Issuer}"</div>
<div>               Reply-Message += "%{TLS-Cert-Common-Name}"</div><div><br></div><div>               Reply-Message += "%{TLS-Client-Cert-Serial}"</div><div>               Reply-Message += "%{TLS-Client-Cert-Expiration}"</div>
<div>               Reply-Message += "%{TLS-Client-Cert-Subject}"</div><div>               Reply-Message += "%{TLS-Client-Cert-Issuer}"</div><div>               Reply-Message += "%{TLS-Client-Cert-Common-Name}"</div>
<div>        }</div></div><div><br></div><div>}</div><div><br></div>Any idea what is going wrong?</div><div><br></div><div>Regards,</div><div><br></div><div>-Mrinal<br><div class="gmail_quote">On Tue, Aug 9, 2011 at 3:12 PM, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">Mrinal K wrote:<br>
> Thank you for the reply. I have 2.1.10 which I believe does support it.<br>
<br>
</div>  Well, the examples in raddb/sites-available/default work.  I don't<br>
know what you're doing differently<br>
<div><div></div><div class="h5"><br>
  Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-<br>
</div>