<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">> why call LDAP in the outerid for EAP- surely call it in the inner-tunnel instead <br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">> (and put some protection around it so that its only called when needed - right<br>> now, if you look, you'll see your LDAP whacked all over the place during requests<br>> coming through - at least 3x more queries to the LDAP than you need.)<br><br>Well, thanks so much Alan, putting all of this into the inner-tunnel authorization block finally allows me to get the value in post-auth block (of the inner-tunnel). The reason why I put this into the outer tunnel was because I'm calling LDAP for authorization only so I didn't think it should mix with the authentication
done in the inner tunnel, where EAP comes into play.. guess I was wrong.<br><br><br> </div> </div> </div></body></html>