On 12/20/2012 05:14 PM, rosect...@yahoo.com wrote:
It is noticed that some VSAs are sent with Access-Challenge but not with
Access-Accept when PEAP is used.
Is there a way to configure the server such that those attributes are
sent with Access-Accept?
"use_tunneled_reply = yes" under the "peap {}" section in "eap.conf".
In addition, if you're seeing the VSAs in Access-Challenge, it's most
likely because you're returning them in the "authorize" second. Instead,
consider returning them in the "post-auth" section of the "inner-tunnel"
server, combined with the config above.
There are other options, depending on your needs.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
