On 29/08/13 15:56, Robert Roll wrote:
I guess I assumed the id: in the TCP dump below was the "EAP Response Identifier" maybe not ? Is there a different EAP response identifier ?
Yes, in the EAP-Message attribute (EAP packet)
I actually have been running with debug radius -X. Obviously a lot longer output than just the TCP dump. That is why I first tried just the TCP dump. I guess I was also hoping somebody might have just had a thought about a common configuration issue...
TBH proxying EAP inner is not common at all; there have been bugs in that area in the past.
Re-reading I notice that you're running 2.10 - upgrade. I'm pretty certain that version has inner-eap proxy bugs. Go to 2.2.0.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html