Re: Inner-Tunnel User-Name

Adam Bishop wrote:

In the default inner-tunnel post-auth block there's a config block to inject the real username into the outer Access-Accept, however it doesn't seem to do that on FreeRADIUS 3/3.1:

(6) post-auth { (6) update outer.reply { (6) eap_ttls : expand: "%{request:User-Name}" -> '@local.com' (6) eap_ttls : User-Name = "@local.com" (6) } # update outer.reply = noop (6) } # post-auth = noop

My understanding is that %{request:User-Name} should have expanded to 'steve@local.com'.

Am I misinterpreting what the block does, or is this a bug?

It's a bug. I've pushed a fix. Alan DeKok.