From inner to outer
Hi! I have the following problem. A module I have written uses the inner tunnel User-Name to find information about the user from an outside source. This user information must be returned in the outer tunnel. Is this doable ? I can think of two ways of doing this: 1) The module while running in the inner tunnel context puts the inner User-Name somewhere where the module when running in the outer tunnel context can pick it up and do the external source lookup. 2) Do the external source lookup in the inner tunnel context and then put the found information somewhere where the module while running in the outer tunnel context can find it. I'd prefer the later. -- Roland
Roland Hedberg wrote:
I have the following problem. A module I have written uses the inner tunnel User-Name to find information about the user from an outside source. This user information must be returned in the outer tunnel. Is this doable ?
Yes.
I can think of two ways of doing this:
Edit eap.conf, change: "use_tunneled_reply = yes" Alan DeKok.
On 11/10/11 16:08, Roland Hedberg wrote:
Hi!
I have the following problem. A module I have written uses the inner tunnel User-Name to find information about the user from an outside source. This user information must be returned in the outer tunnel. Is this doable ?
Sure. Set a variable in the inner-tunnel reply, then set "use_tunneled_reply = yes" on the peap/ttls EAP config. inner-tunnel: post-auth { update reply { Some-Variable := "%{sql:...}" } } default: post-auth { if (reply:Some-Variable) { ... } } N.B. If you are using Fast Session resumption, you probably need to store this info in the Cached-Session-Policy variable.
participants (3)
-
Alan DeKok -
Phil Mayers -
Roland Hedberg