On May 7, 2025, at 12:29 PM, Evan Sharp via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I'm having difficulty understanding why &User-Password is not being found by my inner-tunnel virtual server. Desired outcome is EAP-TTLS/PAP for google's LDAP.
Read the debug output.
In my debug output, I see that the conditional check that would specify ldap as the Auth-Type is not passing.
[eap setup success] [ttls setup success] ... (5) if (&User-Password && !control:Auth-Type) { (5) if (&User-Password && !control:Auth-Type) -> FALSE (5) } # authorize = updated (5) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (5) Failed to authenticate the user [post-auth-reject]
If you're not sure how to read the debug output, then post it to the list. ALL OF IT. Don't edit it. When you edit the debug output, you're deleting things which are needed to answer your question. Go read http://wiki.freeradius.org/list-help We write documentation because we want people to read it. Alan DeKok.