I found that any pair that is being inserted in the authorize section is again inserted in the authentication section. Is this the desired behavior? I managed to overcome this by emptying the %RAD_REPLY hash at the beginning of the authenticate method : %RAD_REPLY = {}; Thought I should mention it in case someone tries something like that. Kinetix Tele.com Mailing Lists wrote:

I am using the following command to my authorize function (rlm_perl) :

$RAD_REPLY{'Cisco-Command-Code'} = \@final_routing;

because I want to add more than one pair in the reply packet.

(final_routing is a perl array containing the desired values)

These pairs are successfully added to the reply message during the authorization phase, but after the authentication function is being processed those pairs are added again one more time.

Note : the only line that I have in my authenticate function is :

return RLM_MODULE_OK;

(positively authenticate anything)

So I end up having twice the pairs I intended to in my reply packet.

Has anyone seen this behavior before?