Zombie Clarification

Alan DeKok aland at deployingradius.com
Sat Mar 24 14:29:08 CET 2012


Alan Buxey wrote:
> Microsoft decided, in their wisdom, to just discard packets that arent right.
> this affects IAS and NPS. if your policy says, for example, 
> 
> NAS-Port-Type = Wireless-802.11
> 
> an the packet doesnt have that attribute...or its not Wireless-802.11..then the packet
> is just silently dropped.

  This violates RFC 2865.  <sigh>

  Not that they care.

> IAS and NPS are a mess with proxied RADIUS - especially when there are policies
> involved.

  This should be on the Wiki, in a "what's wrong with other RADIUS
servers" section. :)

  Alan DeKok.



More information about the Freeradius-Users mailing list