Tariq Rashid <[EMAIL PROTECTED]> wrote: > when a backend radius server sends bakc the following tunnel attributes, the > freeradius 1.0.2 fails the request with "tunnel password is too long for the > attribute"( discovered by radiusd -X).
Ok... > Tunnel-Password = 1:lab That's not the correct format for tags. > if I comment out the Tunnel-Passord, the proxied reply returns fine. I though you said that the backend server sent the attribute? How do you comment it out? > I guess this is a problem with the tagged stting for the password, partt of > which is encrypted perhaps? the backend is Radiator 3.8. See src/lib/radius.c. A byte in the attribute says how long it is. If en/decrypted wrong, the byte will be garbage. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html