proxy incoming PAP request as outgoing PEAP/TTLS requests

[Herwin Weststrate]

On 21-09-15 10:49, Ian Chang-張志邦 wrote:
> Hi,
> 
> I have a question about proxy requests on freeradius 3.0.9
> I wonder  to know can I proxy  incoming PAP request as outgoing PEAP/TTLS requests?
> That is,
> RADIUS supplicants ---------PAP-------> freeradius server  --------PEAP or TTLS-----> another RADIUS server
> 
> If it is,  what configuration I should config?
> Thanks a lot.

You could try to compile eapol_test (see
http://deployingradius.com/scripts/eapol_test/), use rlm_exec to call
the eapol_test executable when receiving a PAP request, and do something
with the return value to decide if you have to send an Access-Accept or
an Access-Reject. Sounds like a terrible hack though.

-- 
Herwin Weststrate