I was trying to follow your suggestions, I was just confused about them. I wasn't sure what I needed to be adding to inner-tunnel. I did end up adding a line to proxy.conf, but it was just a blank entry for the testlab.net realm. After that, authentication worked when using the user@realm format. I have other issues with it at this point, which I believe is outside the scope of the original problem.

I am still not 100% on the inner-tunnel settings I need to configure, however I am still trying to figure it out. I read through inner-tunnel but just ended up getting a bit more confused than I already was.

>What did my message say?
>If you're not going to follow my suggestions, I don't see why you're
>asking questions on this list.

I wasn't trying to ignore your advice, again, I was just confused.

Thanks for the help, though.

On Wed, Oct 20, 2010 at 1:03 AM, Alan DeKok <aland@deployingradius.com> wrote:

Ryan Garrett wrote:
> There must be something I am not understanding, as I am unclear on what
> I need to be adding to proxy.conf.

You need to inform the server that "user@realm" should be treated the
same as "user".

> And from what I can tell,
> inner-tunnel doesn't need to be touched with the way I am configuring,
> or is that incorrect?

> In 2.1.10, read raddb/sites-available/inner-tunnel. Test that with
> "radtest" and "dadmin@testlab.net <mailto:dadmin@testlab.net>".
> Once that works, PEAP will work.

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html