User and EAP authentication

[Thomas Manninger]

   Hi,

   i am using freeradius 3.0.12+dfsg-5+deb9u1 on a debian 9 server.

   I confiured two virutal servers, one for X802.1 network authentication
   (name: inner-tunnel), another virtual server with PAP username/password
   authentication (name: keycloak).

   Every incoming request should processed by the virtual_server
   "keycloak-auth", except all X802.1 request should be processed to the
   virtual_server "inner-tunnel".
   But all requests, also the X802.1 requests, are processed by the
   virtual_server keycloak.

   If i unterstand it correctly, the eap module should send all EAP
   requests to the inner-tunnel, but this in not working :-( ...
   Only if i send all requests to the inner-tunnel virtual-server, then
   X802.1 auth is working

   How can i fix the issue?

   My listen configuration:
   > listen {
   >   type = auth
   >   ipaddr = *
   >   port = 0
   >   virtual_server = keycloak
   > }
   > listen {
   >   type = acct
   >   ipaddr = *
   >   ipv6addr = ::
   >   port = 0
   >   virtual_server = keycloak
   > }

   My keycloak size:
   > server keycloak {
   >   authorize {
   >     files
   >     filter_username
   >     filter_password
   >     preprocess
   >     expiration
   >     logintime
   >     keycloak
   >   }
   >   authenticate {
   >     Auth-Type keycloak {
   >       keycloak
   >     }
   >     Auth-Type pap {
   >       pap
   >     }
   >  }
   >  ...
   >  ...



   Thanks!