freeradius: add eap_inner module

roles/freeradius/defaults/main.yml

@@ -19,6 +19,7 @@ radiusd__enabled_modules_minimal:
   - preprocess # TODO
   - realm # TODO
   - unpack # TODO
+  - eap_inner
   - utf8
 radiusd__enabled_modules: []
 radiusd__tls_cipher_list: DEFAULT

roles/freeradius/tasks/main.yml

@@ -51,6 +51,7 @@
     - mods-available/utf8
     - mods-available/always
     - mods-available/eap
+    - mods-available/eap_inner
   notify:
     - Restart freeradius
 

roles/freeradius/templates/mods-available/eap.j2

@@ -3,9 +3,14 @@
 eap {
 
     default_eap_type = peap
-    timer_expire = 60
+
+    type = peap
+
     ignore_unknown_eap_types = no
+
     cisco_accounting_username_bug = no
+
+    timer_expire = 60
     max_sessions = ${max_requests}
 
     tls-config tls-common {
@@ -37,11 +42,4 @@ eap {
         virtual_server = inner-tunnel
     }
 
-    gtc {
-        auth_type = local
-    }
-
-    mschapv2 {
-    }
-
 }

roles/freeradius/templates/mods-available/eap_inner.j2

@@ -0,0 +1,17 @@
+{{ ansible_managed | comment }}
+
+eap inner-eap {
+
+    default_eap_type = gtc
+
+    type = gtc
+    type = mschapv2
+
+    gtc {
+        auth_type = local
+    }
+
+    mschapv2 {
+    }
+
+}