Reply VSA-s in Access-Reject

[Peter Nixon]

On Wed 30 Aug 2006 12:13, Nicolas Baradakis wrote:
> Yervand Petrosyan wrote:
> > In 1.1.3 version Access-Reject doesn't return in reply
> > VSA attributes but it is works well in 1.0.1.
> > Something was changed?
>
> Yes, because it was considered as a bug.
> See http://bugs.freeradius.org/show_bug.cgi?id=207
>
> I also note Vendor-Specific attributes aren't allow in Access-Reject
> packets per RFC 2865. (section 5.44)
> See http://www.ietf.org/rfc/rfc2865.txt

This is not the first time we have been asked this, and as it appears that 
some NASes used this behaviour, maybe we should make this rfc compliance a 
configurable option..

I have added a section to the FAQ:

http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#VSA_in_Access-Reject

-- 

Peter Nixon
http://www.peternixon.net/
PGP Key: http://www.peternixon.net/public.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060830/de8f9431/attachment.pgp>