Quoting Matthew Newton <mcn4@leicester.ac.uk>:
For what it's worth, rolling your own FreeRADIUS packages for Debian is trivial.
http://wiki.freeradius.org/building/Build#Building-Debian-packages
Right you are! Very good indeed. Sure beats installing directly from source. Now I've got the latest version and it's a Debian package! :-)
That's interesting, but without a copy of the debug output from radiusd -X, nobody will know where to start.
I included what I thought was the most relevant output from 'freeradius -X', because the entire exchanges were about 12 times longer. But, if you think it would make a difference, I'll be sure to include all of it next time.
You could also put the following in your inner-tunnel, rather than the line in your users file, which is probably the tidier way:
update control { Auth-Type := krb5 }
That's it -- it works!! I no longer have "DEFAULT Auth-Type = krb5" in the users file, and instead added the above lines to the 'authorize' section of ./sites-enabled/inner-tunnel. So, that seems to be the solution. However, if anyone has any more questions, I'll be happy to answer. Thanks so much! Cheers, Jaap