Response-Packet-Type == Access-Challenge

Dominique Frise dominique.frise at
Wed Aug 7 08:51:36 CEST 2013

On 08/06/2013 05:29 PM, Alan DeKok wrote:
> Dominique Frise wrote:
>> Is there any other flag/function that would indicate that an
>> Access-Challenge packet was received from the NAS?
>    A NAS will NEVER send an Access-Challenge to the server.
>    A proxy will receive an Access-Challenge from a home server.  As was
> said, you need the latest code from the GIT to use that feature.
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See

Did a fresh install from

./radiusd -v
radiusd: FreeRADIUS Version 2.2.1 (git #12be9f6), for host 
x86_64-unknown-linux-gnu, built on Aug  6 2013 at 21:51:33
Copyright (C) 1999-2013 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
For more information about these matters, see the file named COPYRIGHT.

But still no luck :-(
rad_recv: Access-Challenge packet from host X.X.X.X port 1812, id=101, 
	Reply-Message = "Enter OTP:"
	State = 0x38373131
	Prompt = No-Echo
	Proxy-State = 0x313039
# Executing section post-proxy from file 
+- entering group post-proxy {...}
[eap] No pre-existing handler found
++[eap] returns noop
++? if (Response-Packet-Type == Access-Challenge)
? Evaluating (Response-Packet-Type == Access-Challenge) -> FALSE

Any other idea?


More information about the Freeradius-Users mailing list