>> I still cannot figure out how to pass this value from authorize to
>> post-auth.
>
>  It works for PAP.  The only reason it doesn't work is you're running
> EAP, and that's more complicated.

Is there something extra that needs to be done in order for the value to be preserved when running EAP?

>  There's no need for a 100KB debug output.  Try a *simple* test.

What tool(s) can I use to run a simple EAP test that would still use AD for authentication and LDAP for authorization?

Thanks,

A.