Re: RADIUS question. (fwd)

Mark Whittington (markc@chicks.net)
Sat, 5 Apr 1997 19:27:38 -0500 (EST)

Didn't mean to send this just to MZ...
-----------------------------------------

Date: Sat, 5 Apr 1997 19:26:47 -0500 (EST)
From: Mark Whittington <markc@chicks.net>
To: MegaZone <megazone@livingston.com>
Subject: Re: RADIUS question. (fwd)

On Fri, 4 Apr 1997, MegaZone wrote:

> Once upon a time Warren Vanichuk shaped the electrons to say...
> > Access-Reject = "[ACCOUNT DISABLED] Please contact the PRCN Office",
>
> No. Access-Reject is a packet type identifier.
>
> >The result being the Access-Reject is sent back to the PM, which takes the
> >reason for rejection, and passes it along to the user..
>
> Not sure that is possible.

According to RFC 2058, Attribute type 18 (Reply-Message) could conceivably
carry this message. Quoting the RFC (sec 5.18):

[snip]
This Attribute indicates text which MAY be displayed to the user.

When used as an Access-Accept, it is the success message.

When used in an Access-Reject, it MAY indicate a dialog message to
prompt the user before another Access-Request attempt.
[snip]

So it would be up to the RADIUS server to pass this to the PM and then for
the PM to display it. The question is what will the PM do with this
attribute?

-Mark

---
Tomorrow will be canceled due to lack of interest.