Re: eap_ttls not setting 'FreeRADIUS-Proxied-To'

On Jan 12, 2016, at 7:04 PM, David Lord <d.lord@its.uq.edu.au> wrote:

If one virtual server (SP) uses Proxy-To-Realm to forward to a 2nd virtual server (IDP), which uses an eap module with peap & ttls “virtual_server” set to a 3rd virtual server (inner), is there a reliable way to forward attributes from #3 to #1?

use_tunneled_reply in the EAP configuration. Then, the server *already* uses the reply from the proxy as the basis for it's reply to the NAS. i.e. it Just Does The Right Thing. Alan DeKok.