[EMAIL PROTECTED] (Miquel van Smoorenburg) wrote:
> >  It means that the request is a new one, and different from the first
> >on.
> >
> >  The RFC's specifically allow for this.
> 
> They do? Where does it say that?. And at least for
> accounting packets the vector is _supposed_ to change since the
> packet itself changes - the value of the Acct-Delay-Time attribute
> increases for each packet.

  When an authentication packet is sent, it MAY be sent from the same
port as a previous one, and it MAY re-use the same ID.  In that case,
the authentication vectors MUST be different, if it is a different
request.

> accounting packets the vector is _supposed_ to change since the
> packet itself changes - the value of the Acct-Delay-Time attribute
> increases for each packet.

  Yes.  Re-sent authentication packets don't change, as their contents
don't change.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to