Ahh, I see. Based on the syntax you used it looks like I'd do this using local users file. However, I'm using edirectory for the user db. I have seen in the debug output where radius is checking for any reply items in the directory. Maybe I could use radiusReplyItem as an attribute in edir with a value "User-Name = ${User-Name}"? thanks, mack ----- Original Message ----- From: Alan DeKok <aland@ox.org> Date: Saturday, June 18, 2005 4:21 pm Subject: Re: use_tunneled_reply
-ragan_davis@colstate.edu wrote:
Did you set "User-Name = novelluser" in the *reply* for the tunneled> > session?
Hmmmm...I did not explicitly do this. How to?
Set it as a reply attribute?
user blah-blah = blah User-Name = `%{User-Name}`
You can verify that, independent of EAP, but using "radtest" with the name & password of the tunneled user.
I'm testing this now, but don't see the same "Access-Accept" message in the debug output. Guess I'm still missing something.
You will see the INNER TUNNEL Access-Accept. The reply attributes in that Access accept are the ones which will be copied to the outer tunnel, when TTLS is used.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html