I was trying to follow your suggestions, I was just confused about them. I wasn't sure what I needed to be adding to inner-tunnel. I did end up adding a line to proxy.conf, but it was just a blank entry for the testlab.netrealm. After that, authentication worked when using the user@realmformat. I have other issues with it at this point, which I believe is outside the scope of the original problem. I am still not 100% on the inner-tunnel settings I need to configure, however I am still trying to figure it out. I read through inner-tunnel but just ended up getting a bit more confused than I already was.
What did my message say? If you're not going to follow my suggestions, I don't see why you're asking questions on this list.
I wasn't trying to ignore your advice, again, I was just confused. Thanks for the help, though. On Wed, Oct 20, 2010 at 1:03 AM, Alan DeKok <aland@deployingradius.com>wrote:
Ryan Garrett wrote:
There must be something I am not understanding, as I am unclear on what I need to be adding to proxy.conf.
You need to inform the server that "user@realm" should be treated the same as "user".
And from what I can tell, inner-tunnel doesn't need to be touched with the way I am configuring, or is that incorrect?
In 2.1.10, read raddb/sites-available/inner-tunnel. Test that with "radtest" and "dadmin@testlab.net <mailto:dadmin@testlab.net>". Once that works, PEAP will work.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html