My FR 2.1 is set to authenticate users via PEAP + EAP-TTLS, this works&nbsp; fine but some users are being rejected<br>&nbsp;because their wireless client allows the setting of an outer identity: anonymous or something else, which is not a valid username.<br>
So it&#39;s being rejected. How do I get the inner identity which contains a valid username to be processed instead of the outer identity.<br>&nbsp;I&#39;ve seen some posts about using<b> Autz-type INNER</b> options but have merely succeded in breaking my test system when tryng it out.<br>
<br>At present this is my users file:<br><br><br><br><br><br>#If you are not in either group, no access is allowed<br>
#FreeRADIUS 2.1<br><br><br>#These are the groups we are checking for Lunar Building staff<br>DEFAULT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ldap-Group == &quot;lunar-staff&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Aruba-User-Role = &quot;employee&quot;<br><br>DEFAULT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ldap-Group == &quot;lunar-member&quot;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Aruba-User-Role = &quot;member&quot;<br><br>DEFAULT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SQL-Group == &quot;Guests&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Aruba-User-Role = &quot;guest&quot;<br><br><br>DEFAULT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ldap-group != &quot;lunar-staff&quot;, Auth-Type := Reject<br>
DEFAULT&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ldap-group != &quot;lunar-member&quot;, Auth-Type := Reject<br><br>
#End<br>