Change of Authorization

Jeffrey Sewell jeffrey.sewell at
Sat Jan 27 18:49:55 CET 2007

Thank you both for your replies. Sounds like my next step is to
subscribe to the freeradius-devel list. I've not used python much (no
particular reason, just circumstance) but I'm all about using whatever
tool fits the need.

Edge device vendors have some very creative solutions for this problem
(read there "bloated and clunky" for "creative"), but it seems to me
that it makes more sense to happen at the AAA/RADIUS side of things.

Thanks again,

On 1/27/07, Peter Nixon <listuser at> wrote:
> On Sat 27 Jan 2007 02:08, Jeffrey Sewell wrote:
> > Apologies if this has been addressed before, but I can't find any
> > references in the Wiki or the archives for the use of rfc 3576 Change
> > of Authorization messages.
> >
> > Does FreeRADIUS have any built in way to trigger and/or send a CoA?
> > How have others dealt with users who have exceeded certain limits but
> > have not yet reached session-timout?
> Hi Jeffrey
> As it would turn out I was reading RFC 3576 yesterday and added support for
> CoA and Disconnect packets to pyrad (A python RADIUS library not part of the
> FreeRADIUS project, but written by Wichert who is one of the FR developers
> also)
> radiusd does not currently respond to or natively send CoA or Disconnect
> packets however radclient DOES suport them. This means that you can quite
> happily write an exec/perl/python module which executes radclient (or uses
> the pyrad library) to send CoA or Disconnect packets.. Please read my thread
> titled "RADIUS Disconnect support" on the freeradius-devel list which
> started on Tuesday this week for a little more dicussion of how I think this
> could be added natively to radiusd...
> If you have any further suggestions please reply to that thread..
> --
> Peter Nixon
> PGP Key:
> -
> List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list