Only run a single post-auth when using inner-tunnel

2011-03-07 Thread paul smith
Hi, I have an exec script that I want to run when authenticating a user. The script takes in the username. I want to run the script both for PEAP authentications and PAP authentications. The problem I have is that if I put the exec in the inner-tunnel post-auth section it will work fine for the

Re: Only run a single post-auth when using inner-tunnel

2011-03-07 Thread Phil Mayers
On 07/03/11 10:10, paul smith wrote: Is there some way I can tell the server not to run things in the default post-auth, if the request has been through the inner-tunnel? I'm thinking putting something like the following in the default post-auth section if (!proxy-reply:Packet-Type ==

Re: Only run a single post-auth when using inner-tunnel

2011-03-07 Thread paul smith
Thanks Phil, thats great works really well. It has set me thinking about a variation though, using EAP-Message would mean that it wouldn't run if it had been through the default only, such as EAP-TLS. Is there something else I could use which would indicate if inner-tunnel had been used? thanks,

Re: Only run a single post-auth when using inner-tunnel

2011-03-07 Thread Phil Mayers
On 07/03/11 12:18, paul smith wrote: Thanks Phil, thats great works really well. It has set me thinking about a variation though, using EAP-Message would mean that it wouldn't run if it had been through the default only, such as EAP-TLS. Is there something else I could use which would indicate

Re: Only run a single post-auth when using inner-tunnel

2011-03-07 Thread paul smith
Thats perfect, thanks phil, many thanks for the help. On Mon, Mar 7, 2011 at 1:19 PM, Phil Mayers p.may...@imperial.ac.uk wrote: On 07/03/11 12:18, paul smith wrote: Thanks Phil, thats great works really well. It has set me thinking about a variation though, using EAP-Message would mean