cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] freeradius and use_tunneled_reply

From: Alan Buxey <A.L.M.Buxey AT lboro.ac.uk>
To: "Teulahti, Hannu" <hannu.teulahti AT vamk.fi>, "cat-users AT geant.net" <cat-users AT geant.net>
Subject: Re: [cat-users] freeradius and use_tunneled_reply
Date: Tue, 10 Dec 2013 07:25:55 +0000
List-archive: <http://mail.geant.net/pipermail/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>

This mailing list is for the eduroam CAT tool. Please ask questions about other things (such as RADIUS software configuration) on the relevant list.

I'm the case of use_tunnelled_reply , that ensures that VSAs in the EAP tunnel are exposed to the NAS. You've probably got another bit of configuration that is revealing the user name. Best practice is to use a separate virtual server for requests that come from the national proxy (in which case that server can have very minimal config , things like setting VSAs is not appropriate)

alan

[cat-users] freeradius and use_tunneled_reply, Teulahti, Hannu, 12/10/2013
- Re: [cat-users] freeradius and use_tunneled_reply, Alan Buxey, 12/10/2013