Problem in setting VSA in perl script

[Alan DeKok]

"David Deman" <ddeman at fr.netcentrex.net> wrote:
> In order to test an application using radius, i'm using freeradius-0.9.3

  You should really upgrade to 1.0.5.

> 1) I can't put any attribute in a Reject response to an authorize :
>  for example if I do the following
>      $RAD_CHECK{'Auth-Type'} = "Reject";
>      $RAD_REPLY{'State'} = "30";
>      $RAD_REPLY{'Termination-Action'} = "0";
>      return 2;
>  the network trace show there is no attribute in the response.

  The RFC's say no attributes are allowed in the Access-Reject.  See
the source code in src/main/ which enforces this.

> 2) I try to add some Vendor-Specific Attribute in a radius response
> I do the following
>  	$RAD_REPLY{'Vendor-Specific'} = pack "N C C
> a*",$vendorId,$vsaId,length($value)+2,$value;

  Huh?  Why not just refer to the attribute by name?  That's what the
dictionaries are for.

  Alan DeKok.