On May 31, 2023, at 12:43 PM, Robert Senger <robert.senger@lists.microscopium.de> wrote:
okay, I assumed that if I have enabled the inner-tunnel to copy attributes to the outer reply (by setting "if (0)" to "if(1)" as documented), the attribute will be available as it is sent to the nas. That was a misunderstanding. Now, as I added the code to the inner- tunnel file, it works.
That's good
However, I discovered that neither logintime nor dailycounter get checked if a station uses EAP-TLS. So, I've enabled the check-eap-tls module, activated it in mods-enabled/eap file, added "sql" (to get the Login-Time and Max-Daily-Session attributes), added "logintime" and "dailycounter" in the mods-enables/check-eap-tls file, and as far as I've tested this by now it seems to work. Is that a correct way to enable logintime and dailycounter for EAP-TLS?
If it works... Alan DeKok.