Passing variables from inner tunnel

Alan DeKok aland at
Wed Jul 28 17:18:17 CEST 2010

newtownz wrote:
> Hi,
> Thank your for your answer.
>> Just return User-Name in the reply and do a repeat LDAP query on your 
>> outer layer; doing a 'cn' lookup should be instantaneous...
> I'm a little puzzled on how to accomplish this!

  In the "inner-tunnel" virtual server:

authorize {
  update reply {
	User-Name = "foo"

  Also, be aware that EAP does multiple round trips.  If you update
"outer.control" in one packet, that value is *not* available to the next
packet in the stream.

  Alan DeKok.

More information about the Freeradius-Users mailing list