Qwest and UUNET are throwing a fit because we are returning two sets of Proxy-State attributes when we proxy to our customers. They expect only one.
Apparently, according to the RFC: http://www.freeradius.org/rfc/rfc2865.html#Proxy-State When the proxy server receives the response to its request, it MUST remove its own Proxy-State (the last Proxy- State in the packet) before forwarding the response to the NAS. I'm assuming that the NAS can also mean another upstream proxy. Is there a way to make freeradius only return the specific Proxy-State attribute from the request and not include those which it creates. $ echo "User-Name = "[EMAIL PROTECTED]", CHAP-Password = "test", NAS-Port=10, NAS-Port-Type=0, NAS-Identifier=RadTest, Proxy-State = "0x123" " | ./radclient -r 1 -t 5 -d /usr/local/radius/etc/ 192.168.1.1:1645 01 ClearAsCrystal Received response ID 72, code 2, length = 210 Proxy-State = "0x123" Proxy-State = "72" Service-Type = Framed-User Framed-Protocol = PPP Session-Timeout = 28800 Idle-Timeout = 900 Ascend-Idle-Limit = 900 Ascend-Maximum-Time = 28800 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
