concurrent TTLS and PEAP usage

[Stefan.Neis at t-online.de]

Artur Hecker schrieb:

> we naively try to specify EAP-Type == PEAP for user_peap
> and == TTLS for 
> user_ttls but that breaks both methods (which seems
> normal since this 
> EAP-Type definition is not correct for the internal EAP
> method which 
> however uses the same user name).

Why not almost just as naively do the check vice versa:
If it's user_ttls and EAP-Type == PEAP, set Auth-Type
explicitly to reject?

         Regards,
                   Stefan