Re: Setting final response attributes for EAP

Yes, in post-auth.

post-auth { update reply { ... } }

Thank you, that's an easy way to set it globally for all users - or I can do a database dip there if required.

Generally people will do this kind of thing in the inner-tunnel virtual server and set "use_tunneled_reply = yes" to copy the attributed back. You need to exercise caution if you're using session resumption here, because resumed sessions don't use the inner-tunnel.

Right, I see that it defaults to 'no' which is why it wasn't working originally when I just attached the reply attribute directly to the user. Thanks again, Brian.