VSA attributes sent with Access-Reject response

[Alan DeKok]

Contact (COEXSI) wrote:
> For filtering the Access-Challenge response when doing EAP, I've these lines
> (commented) in the default configuration:
> 
> #	Auth-Type eap {
> #		eap {
> #			handled = 1  
> #		}
> #		if (handled && (Response-Packet-Type == Access-Challenge)) {
> #			attr_filter.access_challenge.post-auth
> #			handled  # override the "updated" code from
> attr_filter
> #		}
> #	}
> 
> When uncommenting them, I've a configuration parsing error:
> 
> Failed to find "handled" in the "modules" section.

  Because you edited the configuration, and removed "always" from
raddb/modules.  It has the definition for "handled".

  Alan DeKok.