Attribute to show authentication method

[Alan DeKok]

On Mar 31, 2016, at 11:03 AM, Jonathan Gazeley <Jonathan.Gazeley at bristol.ac.uk> wrote:
> 
> Is there an easy well to determin in post-auth which authentication method was used to authenticate a user?

  control:Auth-Type.  That works for the default authentication types.

> We have a fairly complex setup where a user can be "authenticated" by MAC address in the Authorize section or via EAP-TLS or EAP-PEAP, both with their own virtual servers.

  That's a bit different.

> In the outer post-auth I want to call a logging module that explicitly says how the user was authenticated but I can't find an attribute which I can reliably check.

  If you're manually authenticating users via MAC address in the "authorize" section, you MUST also manually track which authentication method they used.

  Alan DeKok.