RFC 3579 and Access-Accepts

[Stefan Winter]

Hello,

it seems that FreeRADIUS is sending an EAP-Message fragment along with its 
Access-Accepts, as in:

Packet-Type = Access-Accept
Wed Sep 19 11:59:25 2007 MS-MPPE-Recv-Key = stuff
        MS-MPPE-Send-Key = morestuff
        EAP-Message = 0x03070004
        Message-Authenticator = 0x593773a711f50bd8b4ce98434a7e1590
        User-Name = "anonymous at restena.lu"
        Proxy-State = 0x323039

Whereas RFC 3579 , chapter 2.6.5 says: 
"An EAP-Message/EAP-Request/Notification SHOULD NOT be included within an 
Access-Accept or Access-Reject packet."

This is now the second RADIUS implementation I see that behaves like that - is 
there a reason for the EAP-Message and something wrong with 3579, or is that 
SHOULD NOT just ignored by most?

Greetings,

Stefan Winter

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter at restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070919/62bee168/attachment.pgp>