On 18 Oct 2012, at 10:02, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
<nice but completely irrelevant discussion>
i need to call COA disconnects and other COA packet (service change) upon request from CRM . I don't see how to use the coa in the radius it self as it can be called only upon auth and acct packet processing.
*sigh*
Ok reading through the code it looks like that error message is more specific, it's actually saying the Response Authenticator is incorrect, not the Message-Authenticator.
MD5(Code+ID+Length+RequestAuth+Attributes+Secret)
Again the response authenticator does not include anything from the UDP packet header, so if it is incorrect, it's because the NAS has not selected the correct shared secret.
Hmm, but I guess that doesn't make sense either. Could you just provide traces so we don't have to guess? :) -Arran