EAP processing again

[Alan DeKok]

Emmanuel BILLOT wrote:
> I will not understand all, but i think (i hope) i can roughly follow the
> mechanism. I often try to known what a product do for configuring it.
> Maybe it is a mistake...

  It's often a mistake.  Explanations complex ideas often means getting
deep into secondary topics.  It's simpler and faster just to believe
that it works.

> Here are the last lines of a successful connexion. It begins with the
> last outside tunnel authenticate section, just before entering
> inner-tunnel parsing.
> I obviously believe you about all what you said, but i can't find an
> explicite authenticate section between * ldap authorization and *
> entering LDAP.

  The LDAP group it's entering is in the authenticate section.

  Alan DeKok.