29 Jan
2019
29 Jan
'19
2:03 p.m.
On Jan 29, 2019, at 2:00 PM, Ian Pilcher <arequipeno@gmail.com> wrote:
On 1/28/19 2:40 PM, Alan DeKok wrote:
That's what the "auth_type" setting is for on the EAP GTC module configuration. Set it to something else. e.g. "ldap". And then make sure that "ldap" is listed in the "authenticate" section of the inner-tunnel virtual server.
Boom!
That, plus the changes detailed in http://lists.freeradius.org/pipermail/freeradius-users/2016-September/084737... makes both EAP-GTC and EAP-TTLS work.
That configuration is intended for a different use-case. While they might work, they're not correct. My earlier recommendation is the correct approach. Alan DeKok.