Hi,
This comes from the fact that in the status virtual-server, the "Autz-Type status-server" stanza is defined. But in the current virtual server receiving the "ping" (eduroam) it's not defined,so it triggers an reject message.
well, enable it then.
Well in the end it doesn't change much as the remote server will still mark the server alive after receiving 3 access-reject in response to his status-server.
correct
But is this behaviour wanted ?
depends. on you. there is no point in having an access-accept (using username/password) as thats a credential that could be leaked or stolen etc.... its actually just as good (and standard) to have a reject response....the remote server/local server still know that each other are alive! ideally, both servers handle status-server packets and a basic 'status ping' will work just as well. alan