password not present in ttls inner-tunnel

[Alan DeKok]

On May 7, 2025, at 12:29 PM, Evan Sharp via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I'm having difficulty understanding why &User-Password is not being found
> by my inner-tunnel virtual server. Desired outcome is EAP-TTLS/PAP for
> google's LDAP.

  Read the debug output.

> In my debug output, I see that the conditional check that would specify
> ldap as the Auth-Type is not passing.
> 
> [eap setup success]
> [ttls setup success]
> ...
> (5)       if (&User-Password && !control:Auth-Type)  {
> (5)       if (&User-Password && !control:Auth-Type)   -> FALSE
> (5)     } # authorize = updated
> (5)   ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type =
> Reject
> (5)   Failed to authenticate the user
> [post-auth-reject]

  If you're not sure how to read the debug output, then post it to the list.

  ALL OF IT.

  Don't edit it.  When you edit the debug output, you're deleting things which are needed to answer your question.

  Go read http://wiki.freeradius.org/list-help

  We write documentation because we want people to read it.

  Alan DeKok.