I’ve found a solution in authorize : 
comment "ok=return » in eap

        eap {
#               ok = return
        }



Le 22 oct. 2014 à 16:00, Stefan Paetow <Stefan.Paetow@ja.net> a écrit :

Are you using use_tunneled_reply?

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp@jabber.dev.ja.net
skype: stefan.paetow.janet

Janet, the UK’s research and education network.

Janet(UK) is a trading name of Jisc Collections and Janet Limited, a
not-for-profit company which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238


On 22 Oct 2014, at 13:59, Marc Boisis <marc.boisis@univ-lr.fr> wrote:

Hello,

The attribute « Tunnel-Private-Group-Id » is sent in an access  challenge packet but never in the Access-Accept response, how can I have it in the access accept ?
Thanks


Sending Access-Challenge of id 50 to 10.9.0.1 port 38933
Tunnel-Private-Group-Id:0 = "1"
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Type:0 = VLAN
Class = 0x4f553d61646d696e3b
EAP-Message = 0x010200061920
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x066c0c42066e157cccd2b11a53caf40e



Sending Access-Accept of id 61 to 10.9.0.1 port 38933
User-Name = "mdelavau\000"
MS-MPPE-Recv-Key = 0xe9ac2590a2e51a4337dbabcf1a506eb3fce9d4823514315e383a85d526b4118c
MS-MPPE-Send-Key = 0x99ecc593acf1721f395abf9d3e5b195edc16dd881842737d5cb3299fa77ca5ed
EAP-Message = 0x030c0004
Message-Authenticator = 0x00000000000000000000000000000000

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html