Dropping NAS-Port AVP from Acct-Unique-Session-Id by default

Nick Lowe nick.lowe at gmail.com
Fri Sep 18 14:15:01 CEST 2015


>> I am not convinced therefore that the Class attribute should ever be
>> used as part of a unique session key therefore.
>
>   Maybe.  Since you control the Class attribute, you can send back the *same* Class in the second (and later) authentications.

I didn't think we could reliably know at the RADIUS sever if it's a
new authentication or a re-authentication taking place?

In the case that it's a new authentication, we would want a different
Class attribute so that binding from auth to accounting is reliable.

Definitely an area where we could do with clarification in the spec. Hmm :(

Regards,

Nick


More information about the Freeradius-Users mailing list