Apologies, I didn't read all the MAN pages, found the answer I needed





>My FR 2.1 is set to authenticate users via PEAP + EAP-TTLS, this works  fine but some users are being rejected
>So it's being rejected. How do I get the inner identity which contains a valid username to be processed instead of the outer identity.
>I've seen some posts about using Autz-type INNER options but have merely succeded in breaking my test system when tryng it out.
>
>At present this is my users file:
>
>
>
>
>
>
>#If you are not in either group, no access is allowed
>#FreeRADIUS 2.1
>
>
>#These are the groups we are checking for Lunar Building staff
>DEFAULT         Ldap-Group == "lunar-staff"
>                      Aruba-User-Role = "employee"
>
>DEFAULT         Ldap-Group == "lunar-member"
>                       Aruba-User-Role = "member"
>
>DEFAULT         SQL-Group == "Guests"
>                      Aruba-User-Role = "guest"
>
>DEFAULT         Ldap-group != "lunar-staff", Auth-Type := Reject
>DEFAULT         Ldap-group != "lunar-member", Auth-Type := Reject

>#End