VSA attributes sent with Access-Reject response

[Alan DeKok]

Contact (COEXSI) wrote:
> Yes, we had removed the "always" module as we didn't think it was for
> production purpose.

  See "man radiusd".  It tells you how to make changes, so that you know
it works.

> At the beginning of its configuration file, we can read it's used for
> debugging:
> 
> # The "always" module is here for debugging purposes. Each
> # instance simply returns the same result, always, without
> # doing anything.

  Well, it's used.

> After adding the "always" module, the configuration is parsed without error.
> But, the VSA are still sent along with the EAP-MD5 Access-Challenge
> response!

  If only there was some way of seeing what the server was doing.

  Alan DeKok.
.