Intel PEAP client "Roaming Identity"

[Ben Thompson]

On Thu, 2005-09-15 at 13:54 -0400, Alan DeKok wrote:
> Ben Thompson <bt4 at york.ac.uk> wrote:
> > Could anyone advise me whether it is possible to configure my server so
> > that the actual username used get's logged in the accounting records
> > instead of this roaming identity string?
> 
>   Configure peap{} & ttls{} with "use_tunneled_reply = yes".
> 
>   Add the following to the top of the "users" file:
> 
> DEFAULT	  FreeRADIUS-Proxied-To == 127.0.0.1
> 	  User-Name = "%{User-Name}",
> 	  Fall-Through = Yes
> 
>   This will send the inner tunnel user name back to the AP, which is
> *supposed* to then use it in accounting packets.
> 
>   Alan DeKok.

Thanks Alan, that's done the trick.

Ben