Billot wrote: > A first question : the default file says > > eap { > return ok > } > > EAP request comes with EAP message and is so captured by the eap > authorize section, right ? > It returns an update of the original request with Auth-Type = EAP
Yes. > I can't understand why there is then one second authorize check. I explained. See my previous message. The "inner-tunnel" server is run. This means a second authorize check. It's not that complicated. Read the debug output. It tells you what's going on. There's no magic. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html