Reply attribute in access-accept while doing eap-mschapv2

free.aaa free.aaa at gmail.com
Mon May 26 10:44:19 CEST 2014


I compared 2 debug outputs, one for the access-challenge and one for 
access-accept and found that in access-accept there is a string
> eap : EAP-MSCHAPV2 success, returning short-circuit ok
after which radius completely skip the radcheck and radreply table 
lookup. Contrary, in access-challenge all this lookups are not skipped 
and are inserted in reply packet.

Any help?


24.05.2014 18:56, Alan DeKok пишет:
> free.aaa wrote:
>>   I removed from config all stuff about update reply. And after detailed
>> review of debug output i see Class attribute in some access-challenge
>> messages, but not in access-accept.
>    Where is the Class attribute coming from?
>
>    Normally, if it's in SQL radreply table, it gets sent back in *all*
> packets.
>
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list