PEAP auth rejected due to different inner and outer user-id

douglas eseng douglas.eseng at gmail.com
Sun Feb 16 13:32:26 CET 2014


On Sun, Feb 16, 2014 at 3:50 AM, Alan DeKok <aland at deployingradius.com> wrote:
> douglas eseng wrote:
>> What would be the correct configuration to allow accurate accounting?
>
>   Set use_tunneled_reply = yes
>
>   In the inner-tunnel post_auth section, do:
>
>         update reply {
>                 User-Name := "%{User-Name}"
>         }
>
>   That works for me.
>
>   Also, enable filtering of Access-Challenge packets as described above.
>  And file a bug with the NAS vendor.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thanks Alan,

After enabling the above three steps, accounting is now working
correctly when outer and inner userid are different.

Keep up the good work.


More information about the Freeradius-Users mailing list