Working With EAP-TTLS, and LDAP

[Matthew Newton]

On Fri, 2019-03-22 at 14:12 -0400, Nate . wrote:
> I thought I had attached them, I'm sorry... I'm running through the
> test
> again, and this time I'll make it super clearer which tests are which
> too.

You've got this in your "default" outer server (which is good for plain
PAP):

(0)     if ((ok || updated) && User-Password) {
(0)     if ((ok || updated) && User-Password)  -> TRUE
(0)     if ((ok || updated) && User-Password)  {
(0)       update {
(0)         control:Auth-Type := LDAP
(0)       } # update = noop
(0)     } # if ((ok || updated) && User-Password)  = noop

but not in the inner-tunnel virtual server (for EAP/TTLS-PAP).

You need to do that again inside the inner tunnel.

-- 
Matthew