From inner to outer

[Phil Mayers]

On 11/10/11 16:08, Roland Hedberg wrote:
> Hi!
>
> I have the following problem. A module I have written uses the inner tunnel User-Name to find information about the user from an outside source.
> This user information must be returned in the outer tunnel.
> Is this doable ?

Sure.

Set a variable in the inner-tunnel reply, then set "use_tunneled_reply = 
yes" on the peap/ttls EAP config.

inner-tunnel:

post-auth {
   update reply {
     Some-Variable := "%{sql:...}"
   }
}

default:

post-auth {
   if (reply:Some-Variable) {
     ...
   }
}

N.B. If you are using Fast Session resumption, you probably need to 
store this info in the Cached-Session-Policy variable.