Re: Intel PEAP client "Roaming Identity"

On Thu, 2005-09-15 at 13:54 -0400, Alan DeKok wrote:

Ben Thompson <bt4@york.ac.uk> wrote:

...

Could anyone advise me whether it is possible to configure my server so that the actual username used get's logged in the accounting records instead of this roaming identity string?

Configure peap{} & ttls{} with "use_tunneled_reply = yes".

Add the following to the top of the "users" file:

DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1 User-Name = "%{User-Name}", Fall-Through = Yes

This will send the inner tunnel user name back to the AP, which is *supposed* to then use it in accounting packets.

Alan DeKok.

Thanks Alan, that's done the trick. Ben