FreeRadius Dynamic Vlan mit zertifikatsbasierter Authentifizierung

[ntdomain] Looking up realm "P2510" for User-Name = "P2510\wsvisu"  
[ntdomain] No such realm "P2510"  
++[ntdomain] returns noop
[eap] EAP packet type response id 116 length 17
[eap] No EAP Start, assuming it's an on-going EAP conversation  
++[eap] returns updated
[sql]   expand: %{User-Name} -> P2510\wsvisu
[sql] sql_set_user escaped user --> 'P2510\wsvisu'  
rlm_sql (sql): Reserving sql socket id: 4
[sql]   expand: SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radcheck           WHERE username = 'P2510=5Cwsvisu'           ORDER BY id  
[sql] User found in radcheck table
[sql]   expand: SELECT id, username, attribute, value, op           FROM radreply           WHERE username = '%{SQL-User-Name}'           ORDER BY id -> SELECT id, username, attribute, value, op           FROM radreply           WHERE username = 'P2510=5Cwsvisu'           ORDER BY id  
[sql]   expand: SELECT groupname           FROM radusergroup           WHERE username = '%{SQL-User-Name}'           ORDER BY priority -> SELECT groupname           FROM radusergroup           WHERE username = 'P2510=5Cwsvisu'           ORDER BY priority  
rlm_sql (sql): Released sql socket id: 4
++[sql] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING: Auth-Type already set.  Not setting to PAP
++[pap] returns noop
Found Auth-Type = EAP

mysql> select * from radcheck;
+----+-----------------+--------------------+----+----------+
| id | username        | attribute          | op | value    |
+----+-----------------+--------------------+----+----------+
|  1 | P2510wsvisu     | Auth-Type          | := | EAP      |
|  2 | P2510           | Auth-Type          | := | EAP      |
|  3 | wsvisu          | Auth-Type          | := | EAP      |
|  4 | P2510\wsvisu    | Auth-Type          | := | EAP      |
|  5 | Testworkstaion1 | Auth-Type          | := | EAP      |
|  6 | P2510           | Cleartext-Password | := | certpass |
|  7 | wsvisu          | Cleartext-Password | := | certpass |
|  8 | P2510wsvisu     | Cleartext-Password | := | certpass |
|  9 | P2510wsvisu     | Cleartext-Password | := | certpass |
| 10 | Testworkstaion1 | Cleartext-Password | := | certpass |
| 11 | P2510=5Cwsvisu  | Auth-Type          | := | EAP      |
| 12 | P2510\wsvisu    | Auth-Type          | := | EAP      |
| 13 | P2510=5Cwsvisu  | Cleartext-Password | := | certpass |
| 14 | P2510\wsvisu    | Cleartext-Password | := | certpass |
+----+-----------------+--------------------+----+----------+

Found Auth-Type = EAP
# Executing group from file /etc/freeradius/sites-enabled/inner-tunnel
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/mschapv2
[eap] processing type mschapv2
[mschapv2] # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel
[mschapv2] +- entering group MS-CHAP {...}
[mschap] No Cleartext-Password configured.  Cannot create LM-Password.
[mschap] No Cleartext-Password configured.  Cannot create NT-Password.
[mschap] ERROR: User-Name (P2510\wsvisu) is not the same as MS-CHAP Name (wsvisu) from EAP-MSCHAPv2
++[mschap] returns reject
[eap] Freeing handler
++[eap] returns reject
Failed to authenticate the user.
} # server inner-tunnel
[peap] Got tunneled reply code 3
        EAP-Message = 0x04fe0004
        Message-Authenticator = 0x00000000000000000000000000000000
[peap] Got tunneled reply RADIUS code 3
        EAP-Message = 0x04fe0004
        Message-Authenticator = 0x00000000000000000000000000000000
[peap] Tunneled authentication was rejected.
[peap] FAILURE