My lack of understanding I think, is due in part because of a wpa_supplicant-based client I am using with PEAP/EAP-GTC. The client asks for a username and password, sets up the tunnel and then challenges for a Password again for the GTC stuff. FreeRADIUS rightfully ignores the first password, but I was not completely sure if it was even noticed by anything. Your response pretty much confirms that this is only a quirk of the client in question. On Fri, Jul 13, 2012 at 1:45 PM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:

No

(i'm not even going to ask 'why would you want to do that?')

alan