Hi everybody! My first question was the following:

I would like to know if there is an option to specify the proxy not deleting the VSA located in the access-reject response of the server when the proxy send the access-reject to the client?(keep the VSA)

Clearer, currently, my Radius server send to the proxy an access-reject with VSA and when the proxy receive these packet, it send the >same packet to the client so an access-reject packet but with no VSA (it seem to delete them).

So currently, i have: *>Server Radius*>>>*packet access-reject with VSA*>>>>*Proxy Radius*>>>*packet access-reject without VSA>>>>>>**Client Radius *

So what i would like is:

*>Server Radius*>>>*packet access-reject with VSA*>>>>*Proxy Radius*>>>*packet access-reject with VSA>>>>>>**Client Radius * **

Thank you in advance

So after that we told me to modify the function rfc_clean in the source code util.c. i've edited the function rfc_clean() in the source code (src/main/util.c) by adding the following line (in bold) but it doesn't work (the client don't receive the VSA: case PW_AUTHENTICATION_REJECT: pairmove2(&vps, &(packet->vps), PW_EAP_MESSAGE); pairmove2(&vps, &(packet->vps), PW_MESSAGE_AUTHENTICATOR); pairmove2(&vps, &(packet->vps), PW_REPLY_MESSAGE); pairmove2(&vps, &(packet->vps), PW_VENDOR_SPECIFIC); Could you please tell me what is wrong? have i to add something else in this procedure?Is there another file to modify? Thanks in advance for your answer!