I have searched through the maillinglist archive regarding this matter. There was one thread similar to the problem I'm facing with: Have the outer-tunnel reply with the user-name specified in the inner-tunnel; thus instead of anonymous@some.realm
From this thread: http://lists.freeradius.org/mailman/htdig/freeradius-users/2005-June/msg0057...
In eap.conf: ttls { .... use_tunneled_reply = yes virtual_server = "inner-tunnel" }
In users: .... DEFAULT User-Name = "%{User-Name}", Fall-Through = no
Running radiusd in debug mode, the User-Name attribute remained unchanged through out the request session.
This is already present in post-auth in latest version (after a lengthy explanation): #update outer.reply { # User-Name = "%{request:User-Name}" #} Just remove comments. Ivan Kalik Kalik Informatika ISP