Reply VSA-s in Access-Reject

Peter Nixon listuser at
Wed Aug 30 12:13:29 CEST 2006

On Wed 30 Aug 2006 12:13, Nicolas Baradakis wrote:
> Yervand Petrosyan wrote:
> > In 1.1.3 version Access-Reject doesn't return in reply
> > VSA attributes but it is works well in 1.0.1.
> > Something was changed?
> Yes, because it was considered as a bug.
> See
> I also note Vendor-Specific attributes aren't allow in Access-Reject
> packets per RFC 2865. (section 5.44)
> See

This is not the first time we have been asked this, and as it appears that 
some NASes used this behaviour, maybe we should make this rfc compliance a 
configurable option..

I have added a section to the FAQ:


Peter Nixon
PGP Key:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <>

More information about the Freeradius-Users mailing list