hi, quick one liner really...... if you look at the flow of this, you will notice a small difference when the remote proxy sends back the access-accept (yes, there is a LOT of EAP output - there is also a lot of challenge-response...when you get familar, you can just ignore those 13 or 15 packets...you will learn to just 'blank' them when reading the output - so long as there is no error! ;-)
look at the final bit - post-auth - this is where you want to fire off the logic you need. there is little point doing it elsewhere - for you are only sending it to IAS - which wont do anything useful...you are also making the attribute list bigger and bigger it seems :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
