Sam Schultz wrote:
> I'm currently using EAP-TTLS & PAP (via SecureW2) to authorize &
> authenticate wireless clients against specific realms. Users are
> able to authorize & authenticate properly, but the username in 
> incoming accounting replies come in as 'anonymous@<realmname>'.

  You can set "User-Name" in the Access-Accept, and the NAS should use
that in Accounting-Requests.

> I had this spitting out proper accounting information before,
> and haven't changed any configuration options since putting it
> into production. The only conclusions I can come up with are:
> 
> 1) The access points are buggy (3com OfficeConnects)

  No.

> 2) FreeRADIUS doesn't keep track of connections properly -- either
>    because it doesn't bother to replace anonymous entries with the
>    previously seen identity for the given ID, or I haven't
>    configured it to do so. 

  No.

  The problem is that the supplicant is sending "[EMAIL PROTECTED]" as the
User-Name.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to