Hi Matthew, I agree I just found it odd that it was part of the "under no circumstances should these be in the outer reply" list of attributes in the inner-tunnel config but it is present there. For example I can't see the MS-MPPE attributes which is good but I can see the EAP-Message one even though they're part of the same list. Thanks! On Wed, Nov 6, 2024 at 11:51 AM Matthew Newton via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:
On 06/11/2024 11:42, FreeRAD wrote:
Just one other quick thing, I've noticed that I can see an EAP-Message Attribute in my 'Access-Accept' message back from the server but I was under the impression that the below config in the inner-tunnel config file should stop this. Especially given that it stops me seeing any of the other attributes (apart from User-Name but that was purposefully left in for account purposes).
If you don't send the final EAP-Message back then the EAP Success message won't arrive and the login will be denied.
I can't see how that can be a good thing.
-- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html