Setting final response attributes for EAP

[Brian Candler]

> Yes, in post-auth.
> 
> post-auth {
>    update reply {
>      ...
>    }
> }

Thank you, that's an easy way to set it globally for all users - or I can do
a database dip there if required.

> Generally people will do this kind of thing in the inner-tunnel virtual 
> server and set "use_tunneled_reply = yes" to copy the attributed back. 
> You need to exercise caution if you're using session resumption here, 
> because resumed sessions don't use the inner-tunnel.

Right, I see that it defaults to 'no' which is why it wasn't working
originally when I just attached the reply attribute directly to the user.

Thanks again,

Brian.