> At 01:28 PM 9/5/2001 -0500, you wrote:
>>At 11:20 AM 9/5/2001 -0700, [EMAIL PROTECTED] wrote:
>>>Hello all,
>>>
>>>I am curious if anyone has tested freeradius with a 128bit proxy
>>>attribute.
>>>  Our upstream proxy requires us to be able to take and respond to the
>>>  radius
>>>requests with a 128bit proxy-state attribute.
>>>
>>>Currently we are using Cistron 1.6.4 and this hasn't had any problems
>>>but I thier techs have told me that any earlier versions of Cistron
>>>code was not able to handle thier proxy-state attribute.
>>
>>I know that some older radius servers mangle the Proxy-State attribute
>>in violation of the RFC ( *cough*MERIT*cough* ), but you should find
>>that FreeRADIUS conforms to the RFC explicitly in returning the
>>Proxy-State attribute unmolested.
>>
>>If Cistron 1.6.4 is safe, I very strongly suspect that FreeRADIUS will
>>be safe as well.
>>
>>Of course, the only way to be 100% sure is to test it.  Your upstream
>>should be able to direct a test to a test installation on your network.
> 
> 
> I have tested freeradius with the new Proxy-State that was introduced
> also  in Cistron 1.6.4.  It works perfectly.
> 
> 
> ----------------------------------
> Nathan Miller
> Visp Systems Administration
> Voice:  541-476-5352 ext. 4
> 
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

For anyone else that is curious, yes freeradius supports 128bit Proxy-State
Attributes.

<begin snip from debug>

Login OK: [<FUDGED>] (from nas eli port 1083 cli 5204453487)
Sending Access-Accept of id 57 to 208.186.172.162:1645
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Proxy-State =
0x42535032636563696c2e656c692e6e65742f463243463343413233344638314437
30394231423232383038443836464632433732343846333843433534453534324238
39343344313936433132334232413134394445343636374335344535343942353946
39374444354337344542363942423632314239393443353439353239314341323241
334639413334434333453932314242324630374134

<end snip from debug>

-- 
Joe Modjeski
Systems Administrator
CommSpeed
[EMAIL PROTECTED]
--------------------------------------------------
"If man evolved from monkeys and apes, why do we still have monkeys and
apes?" - From someone out there.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to