It turns out my configuration worked. The issue was that during testing I wasn't including the google 2-factor code with the password. Once I started doing this (appending the code at the end of the LDAP password), it works fine. Oh, and I did replace the ":=" with "=" as suggested. On Thu, Jan 28, 2016 at 4:43 PM, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Thu, Jan 28, 2016 at 03:53:05PM -0800, Michael Martinez wrote:
In /etc/freeradius/users, I have DEFAULT Auth-Type := PAM
This will break EAP; use = rather than :=.
then configure the inner-tunnel for PAM as you have done in the outer.
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ---