9 Mar
2016
9 Mar
'16
4:07 p.m.
On Mar 9, 2016, at 3:38 PM, Vlad Kratsberg <vkratsberg@gmail.com> wrote:
Correction regarding version 3.0.4:
The correct output is in peap section, it keeps insisting on mschap after performing the following change:
The server can request GTC. The client can still choose MS-CHAP.
Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_peap peap { tls = "tls-common" default_method = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no
You probably want to set this to "yes". That will cause the inner tunnel reply to be sent in the final Access-Accept Alan DeKok.