Reply VSA-s in Access-Reject

Yervand Petrosyan yervand_p at
Wed Aug 30 13:24:50 CEST 2006

Thank you for answers,

Really, it would be reasonably to have this option


On Wed 30 Aug 2006 12:13, Nicolas Baradakis wrote:
> Yervand Petrosyan wrote:
> > In 1.1.3 version Access-Reject doesn't return in
> > VSA attributes but it is works well in 1.0.1.
> > Something was changed?
> Yes, because it was considered as a bug.
> See
> I also note Vendor-Specific attributes aren't allow
in Access-Reject
> packets per RFC 2865. (section 5.44)
> See

This is not the first time we have been asked this,
and as it appears that 
some NASes used this behaviour, maybe we should make
this rfc compliance a 
configurable option..

I have added a section to the FAQ:


Peter Nixon
PGP Key:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :

Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 

More information about the Freeradius-Users mailing list