Module-Failure-Message creation in rlm_mschap
Alan DeKok
aland at deployingradius.com
Tue Oct 26 20:45:41 CEST 2010
Garber, Neal wrote:
> The rlm_mschap change to create the Module-Failure-Message attribute
> creates it on the request chain. I notice that the original commit on
> 2010-09-10 (35ee205d4e2dcb4fe5e3
> <http://github.com/alandekok/freeradius-server/commit/35ee205d4e2dcb4fe5e34143a06bd9cafd279eeb>)
> had it in the reply. Then, a subsequent commit intentionally changed it
> to the request (401dcce982f9a9972bc7
> <http://github.com/alandekok/freeradius-server/commit/401dcce982f9a9972bc7bb87d5ee7e0bf3888f3a>).
Every other module adds it to the request list.
> Would you be opposed to putting it back on the reply chain? I ask
> because of the pending change to save the reply attributes upon failure
> to survive the final eap round trip. If it’s not in the reply chain,
> then it gets lost. If you’re opposed to this, should the request chain
> be saved as well (or perhaps just save Module-Failure-Message if it exists)?
Or, copy it from the request to the reply...
Alan DeKok.
More information about the Freeradius-Devel
mailing list