Reply-message and supplicant

Arran Cudbard-Bell A.Cudbard-Bell at sussex.ac.uk
Fri Jun 5 21:00:14 CEST 2009


On 5/6/09 19:10, A.L.M.Buxey at lboro.ac.uk wrote:
> Hi,
>
>> No they can't. Reply-Messages are prohibited in packets containing EAP-Message attributes.
>
> really? well...I guess if you believe in RFC 3579 and hope that everyone
> read section 2.2 of that - invalid packet discussion then you'd
> hope so... however, I see tonnes of packets proxied through the NRPS
> that have EAP-Message and Reply-Message in the same packet.

None of them are coming from Sussex though :)

>
>> Which is why I specified an alternate VSA :P
>
> aye. Microsoft actually have a 'Reason-Code' that is interesting...
>
> http://technet.microsoft.com/en-us/library/cc785145.aspx
>

That is indeed interesting. Sent you an email off-list.

Arran
-- 
Arran Cudbard-Bell (A.Cudbard-Bell at sussex.ac.uk),
Authentication, Authorisation and Accounting Officer,
Infrastructure Services (IT Services),
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT
DDI+FAX: +44 1273 873900 | INT: 3900
GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2



More information about the Freeradius-Users mailing list