EAP anonymous and inner User-name

[Stefan Winter]

Hello,

>  I want to provide the possibility of anonymouse EAP, with inner
> User-name and password.

If you already successfully used outer = inner identity and it worked, you 
don't need to change anything. the eap module doesn't care about the 
User-Name of the outer request, just try it out.

> So I think I have to add the user "annonymous" to the users-file with
> Auth-type = EAP, but how do I access the inner User-name, which I need
> for authentication/authorization?

The inner request will magically show up after the tunnel has been decoded. It 
is a new request, and will have its own User-Name attribute.

Greetings,

Stefan Winter

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter at restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20061117/7feae316/attachment.pgp>