InnerAttributes not escaped when transmitted to outter

Alan DeKok aland at
Tue Jun 2 00:06:47 CEST 2009

Stun Box wrote:
> I'm using PEAP/Mschapv2 with Windows machines. I need the user-name of
> the inner-tunnel when the authentication ends to assign the vlan id.
> But it seems it has not been escaped...
> My User-Name  "DOMAIN/testx" becomes => "DOMAIN estxx"
> And if I try DOMAIN/user it works nicely...
> ++[eap] returns ok
> +- entering group post-auth {...}
> ++[exec] returns noop
> 	expand: %{request:User-Name} -> ANKAMA\testx
> 	expand: %{reply:User-Name} -> ANKAMA	estxx
> How can I escape this ?

  You should be able to set it by hand from the inner tunnel:

	update outer.reply {
		User-Name = "%{User-Name}"

  I'll take a look to see if there's anything in the EAP module that
could affect this.

  Alan DeKok.

More information about the Freeradius-Users mailing list