Re: [Radiusplugin-users] RADIUS challenge support

[Ralf Lübben]

Hi,

right the user would be rejected, the problem is that the plugin itself can't 
communicate with OpenVPN and ask for new attributes. The plugin only delivers 
ERROR or SUCCESS back to OpenVPN. 
Maybe the assumption is not totally right, but I think there is no other way 
so far.
If you need additional attributes which should be sent to the radius server, 
it is no problem to add them.
In my opinion there is no way to handle a access challenge packet from the 
radius server. You only can send information to the radius server which are 
available in the plugin, but these information you can directly add in the 
access request.
Do think there are situations where you only should provide information in the 
access challenge even if you could have send them already in the access 
request?

Ralf





Am Montag 05 Januar 2009 22:15:27 schrieb Robert Svensson:
> Hi,
> Will there be support for radius access challenge in the module some day?
> By looking at the code it seems like a RADIUS access challenge is treated
> the same way as an ACCESS reject. Is this a correct assumption?
>
> Thanx
> Robert Svensson
> Mideye AB
>
>
> _______________________________________________
> Radiusplugin-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users