On 20 Jul 2011, at 12:49, Alexander Clouter wrote:
Scott Armitage <S.P.Armitage@lboro.ac.uk> wrote:
I have noticed that when authenticating using TTLS/MSCHAPv2 that the outer-identity is used in the RADIUS reply packet even if the use_tunneled_reply is set to yes for TTLS in eap.conf
Does anyone know the reason for this?
TLS session resumption?
I am, but have tested with it off and get the same result.
Also TTLS/MSCHAPv2 is possibly for you actually TTLS/EAP-MSCHAPv2 which means you get in effect an inner-inner tunnel if I remember correctly.
Have a nosey at:
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg71026.h...
Thanks, for the link. I could force the user-name in the reply, as suggested, with some rewriting of attributes. I was mostly just wondering why TTLS behaved in this way. Scott