"David Deman" <ddeman@fr.netcentrex.net> wrote:
In order to test an application using radius, i'm using freeradius-0.9.3
You should really upgrade to 1.0.5.
1) I can't put any attribute in a Reject response to an authorize : for example if I do the following $RAD_CHECK{'Auth-Type'} = "Reject"; $RAD_REPLY{'State'} = "30"; $RAD_REPLY{'Termination-Action'} = "0"; return 2; the network trace show there is no attribute in the response.
The RFC's say no attributes are allowed in the Access-Reject. See the source code in src/main/ which enforces this.
2) I try to add some Vendor-Specific Attribute in a radius response I do the following $RAD_REPLY{'Vendor-Specific'} = pack "N C C a*",$vendorId,$vsaId,length($value)+2,$value;
Huh? Why not just refer to the attribute by name? That's what the dictionaries are for. Alan DeKok.