Re: EAP-TTLS not working

On Oct 28, 2016, at 6:58 AM, Marlen Caemmerer <caemmerer@ash-berlin.eu> wrote:

What would you recommend to let FreeRadius authenticate the user? LDAP or users file or something else?

Yes. That's what databases are for.

Thanks :). So this means I configure the default virtual server to do TTLS and the inner virtual server to do PAP?

That works in the default configuration. You don't need to do anything.

Then if I do this with rlm_perl I would write

Auth-Type PAP { perl }

in the inner-tunnel config.

That works.

In the default config I guess I'd have to put eap in the authenticate section.

Is this correct?

You don't need to do anything. The default configuration works. Alan DeKok.