Dropping NAS-Port AVP from Acct-Unique-Session-Id by default
Nick Lowe
nick.lowe at gmail.com
Fri Sep 18 14:15:01 CEST 2015
>> I am not convinced therefore that the Class attribute should ever be
>> used as part of a unique session key therefore.
>
> Maybe. Since you control the Class attribute, you can send back the *same* Class in the second (and later) authentications.
I didn't think we could reliably know at the RADIUS sever if it's a
new authentication or a re-authentication taking place?
In the case that it's a new authentication, we would want a different
Class attribute so that binding from auth to accounting is reliable.
Definitely an area where we could do with clarification in the spec. Hmm :(
Regards,
Nick
More information about the Freeradius-Users
mailing list