Routing new RFC7542-style realms

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Mon Oct 3 11:53:41 CEST 2016


Hi,

> Hmmm, to follow up on this... I've gotten it to route correctly, but on
> the ultimate destination (i.e. at "realhome.realm"), I now get a message
> saying that the EAP Identity does not match User-Name, which then
> subsequently leads to failure. It's not quite unexpected since EAP keeps
> track of what User-Name *should* be.

expected - as you've messed with the User-Name - you need to keep the user-name the
same, and just use unlang to make the proxy decision. the END host needs to
receive the packet as is....and have the smarts to deal with it.

alan


More information about the Freeradius-Users mailing list