problem with attributes in access-reject

Stefan Winter stefan.winter at
Wed Dec 5 11:38:10 CET 2007

> However freeradius appears to be blocking all but Reply-Message from
> getting to the client.

Which is the correct behaviour according to RFC2865 - only EAP-Message, 
Message-Authenticator and Reply-Message are allowed.
The other attributes are stripped non-configurably in src/main/util.c, 
function rfc_clean(). If you want to change the behaviour, and break 
conformity with the RADIUS protocol, that's the place to go to.



Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter at     Tel.:     +352 424409-1                Fax:      +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
URL: <>

More information about the Freeradius-Users mailing list