rlm_eap: identity does not match User-Name, setting from EAP identity

[Agent Smith]

Hello group,

I have FR configured for EAP/TLS for wireless but I
ran into an interesting problem.

When a user connectes, they are presented with a login
box (username, password and domain name) if they put a
domain name in the domain field, radius can't
authenticate them and gives that error message. when
the domain field is left empty, it works fine.

I read some posting that talked about how you have to
turn off ntdomain_hack off and I tried that, it didn't
gave me that error but then the ntlm_auth failed
saying 'NO SUCH USER' so my guess is that the
user-name has to be exactly same as what gets sent
into EAP message.

has anyone else ran into this? any ideas on how to fix
it?


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com