Thank you for answers, Really, it would be reasonably to have this option configurable. Yervand On Wed 30 Aug 2006 12:13, Nicolas Baradakis wrote:
Yervand Petrosyan wrote:
In 1.1.3 version Access-Reject doesn't return in reply VSA attributes but it is works well in 1.0.1. Something was changed?
Yes, because it was considered as a bug. See http://bugs.freeradius.org/show_bug.cgi?id=207
I also note Vendor-Specific attributes aren't allow in Access-Reject packets per RFC 2865. (section 5.44) See http://www.ietf.org/rfc/rfc2865.txt
This is not the first time we have been asked this, and as it appears that some NASes used this behaviour, maybe we should make this rfc compliance a configurable option.. I have added a section to the FAQ: http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#VSA_in_Access-Rejec... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc