28 Apr
2016
28 Apr
'16
8:10 a.m.
On Apr 28, 2016, at 6:03 AM, Stefano Zanmarchi <zanmarchi@gmail.com> wrote:
According to MS-CHAP-V2 standard in case of authentication failure the Failure Packet should contain the following text in the Message field: "E=691 R=... ..." . Freeradius does send "E=691" if send_error is set to yes in mods-enabled/eap, but this may cause (as stated in the comments) some clients not to work.
You can edit the reply in the "Post-Auth-Type Reject" section. Just set the attribute to the value you need. Alan DeKok.