What does that mean? "I tried stuff and it didn't work".
I searched here: http://freeradius.1045715.n5.nabble.com/ (read a lot of things, but thought that all of them wouldnt work for me) so, as you can see, I tried only one of them and did not work... (I know why now, thanks to your explain)
You should probably instead do:
update outer.state { User-Name := &request:User-Name }
Which means "track the user name across multiple packets". When you do "update outer.reply", it just updates *this* reply. Not the final Access-Accept, which may be many packets later.
I'll do that
Is that the *outer* post-auth section?
Yes, it is... logs with number 225 are from virtual server default: (225) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/default
You should read sites-enabled/default, and look for "TTLS and PEAP" in the post-auth section. The comments there are for exactly this situation.
If you don't have those comments, upgrade to the most recent version of the server. Or, look on GitHub for the default configuration.
I read this... I imagine that this has to do with your suggestion of outer.state, right?
Don't bother with CUI.
you dont know how happy I got reading this =)