FR3.0.11 with ldap + 802.1x + dynamic Vlan assignment.

[Alan DeKok]

On Mar 9, 2016, at 3:38 PM, Vlad Kratsberg <vkratsberg at gmail.com> wrote:
> 
> Correction regarding version 3.0.4:
> 
> The correct output is in peap section,  it keeps insisting on mschap after
> performing the following change:

  The server can request GTC.  The client can still choose MS-CHAP.

> Using cached TLS configuration from previous invocation
>   # Linked to sub-module rlm_eap_peap
>   peap {
>    tls = "tls-common"
>    default_method = "mschapv2"
>    copy_request_to_tunnel = no
>    use_tunneled_reply = no

  You probably want to set this to "yes".  That will cause the inner tunnel reply to be sent in the final Access-Accept

  Alan DeKok.