Revisiting June 4, 2017 thread, "WARNING: Outer and inner identities are the same."

David Hendricks dahendricks1 at gmail.com
Wed Dec 20 20:40:55 CET 2017


I see. I notice that a Samsung phone gives a login option for "Anonymous
identity" that doesn't seem to be provided for a Microsoft client. So we
need to get on Microsoft, right?

On Wed, Dec 20, 2017 at 2:31 PM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Dec 20, 2017, at 2:18 PM, David Hendricks <dahendricks1 at gmail.com>
> wrote:
> >
> > Forgive me. I have the same issue as mentioned in the June 4, 2017
> archived
> > thread. It seems to me the issue is explained but not how to fix it.
> >
> > Question: Which file must be edited and in which manner to eliminate this
> > warning about user privacy being compromised due to the same outer and
> > inner identities?
>
>   You don't.
>
>   Both inner and outer identities are supplied by the user who is
> authenticating.  You can't (or at least shouldn't) edit them on the server.
>
>   The warning is there to indicate that the client MAY be misconfigured.
> The solution is to fix the client, or failing that, ignore the warning.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html


More information about the Freeradius-Users mailing list