Hi, > Well, RFC 3579 2.6.5 says : If EAP-Message, then there MUST not be a > Reply-Message. I understand the point on this based on the RFC.
check RFC 5080 - which updates that RFC. however, your reply message is not going on as part of the EAP conversation....you are sending the reply message to the outer-tunnel as part of the reject...no within the inner-tunnel EAP session...so there shouldnt be any EAP message around (but hey, who knows? ! ;-) ) just run in debug mode (radiusd -X) and check/see what packets and contents you are sending dont worry too much - some RADIUS servers break all the specs with regards to contents of some packets...at least FreeRADIUS gives you the chance to behave ( I assume you are running the attr filter on access requests to keep the contents legal? ;-) ) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
