The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hy Alan,
You mean you are using this on certain devices? Windows does not allow 
setting the whole outer identity, just the username part, the rest is 
taken from the real username (therefore the real is required).  I always 
wondered why it is that MS have implemented it diffrently for PEAP and 
TTLS (on W8) and then read the PEAP specidfication. It turns out that 
this is exactly how the have defined it in PEAP, the anonymous user part 
not the whole EAP identity.

I expect that RADIUS implementations do not care, they just take the 
outer and the inner separately.

Tomasz


W dniu 2014-07-23 10:56, Alan Buxey pisze:
> >However, there are limitations to the >above, for instance the 
> specification of
> >PEAP does not allow the inner identity >to have a different realm then
> >the outer identity
>
> eh? I'm always using a realm-less innerID (with outer having a realm) 
> with PEAP. Not a problem.
>
> alan
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity. 

--
Tomasz Wolniewicz
          
twoln AT umk.pl
        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576