EAP processing

[Alan DeKok]

Billot wrote:
> A first question : the default file says
> 
> eap {
>  return ok
> }
> 
> EAP request comes with EAP message and is so captured by the eap
> authorize section, right ?
> It returns an update of the original request with Auth-Type = EAP

  Yes.

> I can't understand why there is then one second authorize check.

  I explained.  See my previous message.  The "inner-tunnel" server is
run.  This means a second authorize check.

  It's not that complicated.  Read the debug output.  It tells you
what's going on.  There's no magic.

  Alan DeKok.