"Lionel Gavage" <[EMAIL PROTECTED]> wrote:
> even with this option, the problem is always present!
> 
> an idea ?

  <shrug>  Buy a better client?

  The tunneled session MUST include an EAP-Identity packet, which is
where the user name comes from.  If the client doesn't send it, don't
complain that FreeRADIUS is broken.  Fix the client.

  The user name is REQUIRED for MS-CHAP, which is what PEAP uses
inside of the TLS tunnel.  Any client that doesn't send a user name is
broken.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to