Reply VSA-s in Access-Reject
- To: Free RADIUS <freeradius-users@lists.freeradius.org>
- Subject: Reply VSA-s in Access-Reject
- From: Yervand Petrosyan <yervand_p@yahoo.com>
- Date: Wed, 30 Aug 2006 04:24:50 -0700 (PDT)
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=BEggWef63pK2qpM65qBwxX4cFppXB2unRGXn1WvE6aX9oVdMqlCzmFmCILxd/3xBjVaF0uLGzKcF64jmYZNDRx2EIrWY3I8cdHaFLOeWj2QBJG0zptCGBwIMrPkecgJ907jM8qCsYk+uDxVpkZajdcLDS8rwimOGhoTbap0Nkyg= ;
- Reply-to: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Thank you for answers,
Really, it would be reasonably to have this option
configurable.
Yervand
On Wed 30 Aug 2006 12:13, Nicolas Baradakis wrote:
> Yervand Petrosyan wrote:
> > In 1.1.3 version Access-Reject doesn't return in
reply
> > VSA attributes but it is works well in 1.0.1.
> > Something was changed?
>
> Yes, because it was considered as a bug.
> See http://bugs.freeradius.org/show_bug.cgi?id=207
>
> I also note Vendor-Specific attributes aren't allow
in Access-Reject
> packets per RFC 2865. (section 5.44)
> See http://www.ietf.org/rfc/rfc2865.txt
This is not the first time we have been asked this,
and as it appears that
some NASes used this behaviour, maybe we should make
this rfc compliance a
configurable option..
I have added a section to the FAQ:
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#VSA_in_Access-Reject
--
Peter Nixon
http://www.peternixon.net/
PGP Key: http://www.peternixon.net/public.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
https://list.xs4all.nl/pipermail/freeradius-users/attachments/20060830/de8f9431/attachment.bin
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
This archive was generated by a fusion of
Pipermail (Mailman edition) and
MHonArc.