Proxying PEAP/MSCHAP

[Bob McCormick]

I read the post quoted below, and it seemed to indicate that it should 
be possible to get freeradius to handle PEAP or TTLS, and proxy the 
inner MSCHAP request to another radius server.  Has anyone ever got 
this to work?  I've tried, but I keep getting the following error 
message:

 WARNING: You set Proxy-To-Realm = LOCAL, but it is a LOCAL realm!  
Cancelling invalid proxy request.

Any ideas?  This is is with the 20040412 CVS snapshot.

    From:     [EMAIL PROTECTED]
        Subject:        Re: Proxying TTLS and PEAP
        Date:   March 19, 2004 11:37:51 AM MST
        To:       [EMAIL PROTECTED]
        Reply-To:         [EMAIL PROTECTED]
[EMAIL PROTECTED] wrote:
Is it possible to use Freeradius in such an environment, how is it 
configured?
  Yes.  In the latest CVS snapshot, you can put the following at the
top of the "users" file:
#---
DEFAULT Proxy-To-Realm := "example.com"
        Fall-Through = Yes
DEFAULT EAP-Type == PEAP, Proxy-To-Realm := LOCAL
        Fall-Through = Yes
DEFAULT EAP-Type == EAP-TTLS, Proxy-To-Realm := LOCAL
        Fall-Through = Yes
#---
  This will make all request be proxied to "example.com", but will
cancel that proxying for PEAP and TTLS.
  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html