Dave Mason <[EMAIL PROTECTED]> wrote: > This may be an easy one but I wanted to double check with the list. I > have an EAP type that requires dropping any Access-Request/EAP-Response > with certain invalid attribute values. To do this, do I modify > eap_authenticate in rlm_eap.c to return RLM_MODULE_HANDLED in this case? > This would require me to modify eaptype_select, eaptype_call, etc. to > return a new value (EAP-NOOP?). RLM_MODULE_HANDLED appears to be the > only return code that does nothing; that is, doesnt send Access-Reject.
The EAP module shouldn't be defining it's own return codes, which are essentially identical to the RLM_MODULE return codes. Step one would be fixing rlm_eap so that the return codes are sane. After that, the question of what to return when, and how to handle the return codes becomes much easier. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
