proxy-to-realm versus using a suffix

[Alan DeKok]

Chris Fruehwirth wrote:
> Below is the debug output from FreeRADIUS. The first attempt is using
> the suffix ctester at sw, which works. The second attempt is using the
> users file and no realm, which fails.
...
> ++[eap] returns updated
> ++[unix] returns notfound
>   users: Matched entry DEFAULT at line 207
> ++[files] returns ok

  The "files" module is listed after the "eap" module.  So the server
will start EAP *before* you tell it to proxy the request.

  The solution is to mark the request as being proxied *before* the EAP
module runs.

  If you don't want to do EAP authentication locally, then just delete
the reference to the EAP module.

  Alan DeKok.