"Chris A. Kalin" <[EMAIL PROTECTED]> wrote:
> OK, I'm dealing with a UUNet reseller who apparently requires me to return
> the Proxy-State attribute he sends me in either an Access-Accept or
> Access-Reject situation.  The Proxy-State attribute is returned just fine
> when the username and password works correctly (Access-Accept).  However,
> when the password is not correct for the username (Access-Reject), then
> _nothing_ beyond the Access-Reject is returned.  Not a Proxy-State, nothing.
> Did I miss something to make this happen or is UUNet asking for something
> unreasonable?

  If a Proxy-State is in a request packet, it MUST be returned in all
reply packets for that request.

> On a similar note, I've noticed that when I want to send a Reply-Message in
> an Access-Reject situation, the RADIUS server won't send it back, just like
> the above situation.

  Hmm... I'm seeing it being sent back in my local tests.

> UUNet won't play ball with me unless I can either prove to them that they're
> wrong (aka they don't really need me to do this) or I can send them back a
> Proxy-State response no matter what.  Can anyone help me out with this?

  The server SHOULD send back Proxy-State in reject messages.  If it's
not, then there's a bug.

  Testing it in debugging mode should let you see quickly if the
Proxy-State is being sent back.

> As an aside, I'm noticing an unbelievably long time before my postings hit
> the list, and every so often I'll see an old post of mine end up back on the
> list.  I know my mail server isn't re-sending them, is something going on
> with the list server?

  The list server was sitting on email for a week or so.  It looks
like it's now been fixed.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to