Hi,
> Unfortunately that then causes the Chargeable-User-Identity to never make it into the final reply, even when I update the CUI code to use the outer reply instead of the inner. The Access-Challenge causes that to get swallowed.
>
> I've been going around in circles with this and tried everything. :-/
I reported that CUI isn't copied back on reauth, and was told that it's
fixed in 3.0.x now. Could you try?
Stefan
>
> Stefan
>
>
>> -----Original Message-----
>> From: Sam Hartman [mailto:[log in to unmask]]
>> Sent: 18 February 2014 15:07
>> To: Paetow, Stefan (DLSLtd,RAL,LSCI)
>> Cc: [log in to unmask]
>> Subject: Re: Puzzled - Multiple MS-MPPE-*-Key entries in Access-Accept
>> when using FR 3.0.1 + Trust_router
>>
>> Please never use use_tunneled_reply.
>> Instead explicitly copy the attributes you need to the outer reply in
>> the post-auth section of inner-tunnel.
>> 3.0.0 had bugs doing this but I believe 3.0.1 should be fine.
>
>
--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
Tel: +352 424409 1
Fax: +352 422473
PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
|