Windows Machines not Validating Cert

[FreeRAD]

Hi Matthew,

I agree I just found it odd that it was part of the "under no circumstances
should these be in the outer reply" list of attributes in the inner-tunnel
config but it is present there. For example I can't see the MS-MPPE
attributes which is good but I can see the EAP-Message one even though
they're part of the same list.

Thanks!

On Wed, Nov 6, 2024 at 11:51 AM Matthew Newton via Freeradius-Users <
freeradius-users at lists.freeradius.org> wrote:

>
> On 06/11/2024 11:42, FreeRAD wrote:
> > Just one other quick thing, I've noticed that I can see an EAP-Message
> > Attribute in my 'Access-Accept' message back from the server but I was
> > under the impression that the below config in the inner-tunnel config
> file
> > should stop this. Especially given that it stops me seeing any of the
> other
> > attributes (apart from User-Name but that was purposefully left in for
> > account purposes).
>
> If you don't send the final EAP-Message back then the EAP Success
> message won't arrive and the login will be denied.
>
> I can't see how that can be a good thing.
>
> --
> Matthew
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>