eap work but attributes not in reply

I can see bits and pieces in the docs but can't quite make sense of it. How do I setup so all attributes are returned in a auth success response? I have copy_request_to_tunnel = yes which I guess gets me half way there. Bill