CoA server conception

Alan DeKok aland at deployingradius.com
Fri Mar 3 14:39:25 UTC 2023


On Mar 3, 2023, at 9:07 AM, Yuriy Ivkin <y.ivkin at corp.rtln.ru> wrote:
> 
> Greetings Alan!
> 
> Thank you for your answer!
> 
> >  The next step is for you to figure out WHEN you want to send CoA packets.
> 
> Some thing like this ?

  That's really not what I suggested.

  There is absolutely no need to *always* do "update coa", and then later say "no ,we don't need it".

  Policies like this are difficult to understand, and prone to errors.

  It is much better to figure out when you want to send CoA packets, and only then do "update coa".

> if(User-Name != ""){

  Which system is sending empty User-Name attributes?  This is not permitted by the RFCs.

  This check is useless, and will do nothing.

  Alan DeKok.



More information about the Freeradius-Users mailing list