SOLVED. Modified my proxy.conf file as per another list post. You cannot just add the 'nostrip' option to the realm. You must remove the home_server and home_server_pool, but keep the options from the home_server and put them under the realm.<div>
<br></div><div>This solves the DOS loop problem. </div><div><br></div><div>Example proxy.conf:<br><div><br></div><div><div>proxy server {</div><div> default_fallback = no</div><div>}</div><div><br></div><div>realm <a href="http://example.com">example.com</a> {<br>
</div><div><br></div><div> type = auth</div><div> ipaddr = 127.0.0.1</div><div> port = 1812</div><div> secret = testing123</div><div> require_message_authenticator = yes</div><div> response_window = 20</div>
<div> zombie_period = 40</div><div> revive_interval = 120</div><div> status_check = status-server</div><div> check_interval = 30</div><div> num_answers_to_alive = 3</div><div> max_outstanding = 65536</div>
<div> coa {</div><div> irt = 2</div><div> mrt = 16</div><div> mrc = 5</div><div> mrd = 30</div><div> }</div><div> nostrip</div><div>}</div><div>
<br></div><div>realm LOCAL {</div><div>}</div></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Dec 9, 2012 at 1:56 PM, Dan Letkeman <span dir="ltr"><<a href="mailto:danletkeman@gmail.com" target="_blank">danletkeman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Here is my proxy.conf file contents:<div><br><div><br></div><div><div>proxy server {</div><div><br></div><div><br></div>
<div><br></div><div> default_fallback = no</div><div><br></div><div>}</div><div><br></div><div>
<br></div><div>home_server localhost {</div><div class="im"><div> type = auth</div><div><br></div><div> ipaddr = 127.0.0.1</div><div><br></div><div><br></div><div><br></div><div><br></div><div> port = 1812</div>
<div>
<br></div></div><div> secret = testing123</div><div><br></div><div><br></div><div><br></div><div> require_message_authenticator = yes</div><div><br></div><div> response_window = 20</div><div><br></div>
<div>
<br></div><div> zombie_period = 40</div><div><br></div><div><br></div><div> revive_interval = 120</div><div><br></div><div> status_check = status-server</div><div class="im"><div><br></div><div><br></div>
<div> check_interval = 30</div>
<div><br></div><div> num_answers_to_alive = 3</div><div><br></div></div><div> max_outstanding = 65536</div><div class="im"><div><br></div><div> coa {</div><div> irt = 2</div><div><br></div>
<div> mrt = 16</div>
<div><br></div><div> mrc = 5</div><div><br></div><div> mrd = 30</div><div> }</div><div>}</div><div><br></div><div><br></div><div>home_server_pool my_auth_failover {</div><div> type = fail-over</div>
<div><br></div><div><br></div><div> home_server = localhost</div><div><br></div><div><br></div><div><br></div><div>}</div><div><br></div><div><br></div><div>realm <a href="http://example.com" target="_blank">example.com</a> {</div>
<div><br></div><div> auth_pool = my_auth_failover</div><div><br></div></div><div> nostrip</div><div><br></div><div>}</div><div><br></div><div><br></div><div><br></div><div>realm LOCAL {</div><div>}</div><div>
<br></div>
</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Dec 9, 2012 at 11:09 AM, Dan Letkeman <span dir="ltr"><<a href="mailto:danletkeman@gmail.com" target="_blank">danletkeman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Alan,<div><br></div><div>I have added 'nostrip' to the realm <a href="http://example.com" target="_blank">example.com</a> and it looks like it has problems with that. Possibly some sort of loop?<div>
<br></div><div><a href="https://docs.google.com/open?id=0B57E1K2jJi4DZGwzSUtDajdQV2s" target="_blank">https://docs.google.com/open?id=0B57E1K2jJi4DZGwzSUtDajdQV2s</a><br>
</div><div><br></div><div><br></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Dec 9, 2012 at 9:58 AM, Alan Buxey <span dir="ltr"><<a href="mailto:A.L.M.Buxey@lboro.ac.uk" target="_blank">A.L.M.Buxey@lboro.ac.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<div><br>
> [eap] Identity does not match User-Name, setting from EAP Identity.<br>
<br>
</div>EAP doesnt like the user-name being played around with....ensure that you 'nostrip'<br>
in your proxy.conf for the realm you are handling....or use 'stripped-user-name'<br>
for the checks/handlers.<br>
<span><font color="#888888"><br>
<br>
alan<br>
</font></span><div><div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>