eap_ttls not setting 'FreeRADIUS-Proxied-To'

[Stefan Paetow]

> Sorry, Apple Mail. Switched to plain text and replies look better in outlook web now. Fixed?

Yes.

> The reason for having 3 may or may not be good architecture (but here isn’t the place to ask). I might just cut it down to inner and outer, which would make the attribute-forwarding irrelevant.

Yes. That's the most straight-forward. If you want to restrict some attributes to on-campus only, look at the virtual attributes that describe the client that connects to your server... if it's the national proxy, you don't ship some attributes (because you know they won't be needed there). Whether you key off the national proxy's client info, or whether you key off the info of your own home NAS client info, doesn't really matter, as long as it is easily maintained by yourself (or your successor).

:-)

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp at jabber.dev.ja.net
skype: stefan.paetow.janet

jisc.ac.uk

Networkshop44, University of Manchester. Save the date: 22-24 March, 2016. #NWS44

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160113/12023259/attachment.sig>