19 Dec
2011
19 Dec
'11
11:39 a.m.
Hi,
copy_request_to_tunnel = yes
As mentioned earlier, I am assigning a standard RADIUS attribute, but the value I'm passing to it is not there when I call it, which is in the post_auth of the outer virtual server.. I figured it made sense to put it there, since I call the LDAP module in the authroize section of the outer virtual server. Should this be done in the inner-tunnel? I guess I'll give that a try too...
why call LDAP in the outerid for EAP- surely call it in the inner-tunnel instead (and put some protection around it so that its only called when needed - right now, if you look, you'll see your LDAP whacked all over the place during requests coming through - at least 3x more queries to the LDAP than you need.) alan