EAP-TTLS-PAP Doesn't send Clear-Password to proxy-innter-tunnel

Stefan Paetow Stefan.Paetow at jisc.ac.uk
Thu Aug 4 16:40:58 CEST 2016

> Isn't there any way to force client to send PAP inside of the tunnel?
> Something like:
> If (auth_type != PAP)
>   Return notsupported

You can send a reject back, but that's as far as it goes.

But as Alan D pointed out several times, sort out your client end.

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at jabber.dev.ja.net
skype: stefan.paetow.janet


Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160804/44cd8a16/attachment.sig>

More information about the Freeradius-Users mailing list