RV: radreply works even with access-reject

> > > I have the following situation. The user XXX exists in=20
> > > the radcheck table. He has its password and=20
> > > everytingh works ok. Upon an access-request,=20
> > > if user/password provided are ok, I get an=20
> > > access-accept response with a reply containing the attribute=20
> > > assigned to the XXX user in the radreply table.
> > >=20
> > > The rare ( rare? ) thing is the following:
> > >=20
> > > If the password provided is wrong, I get the=20
> > > access-reject response,=20
> > > but all the attributes in the radreply table are sent to=20
> > > the nas ...=20
> > > is this correct ???? Because, I do not really want this to happen=20
> > > ...
> > >=20
> > > Thank you in advance
> >=20
> > I've also discovered that when using CHAP, I get the
> > access-reject, but the reply-attributes are sent. Whereas,=20
> > when using Plain-text password ... I also get the=20
> > access-reject, but no reply-attributes are sent. Any hint ?
> >=20
>
> Any help ?
>=20

Hey, come on people ... just wanna know if this is normal or not ....
I do not want to have to reply attributes if I got an access-reject,
because of a password failure ...=20
Obviously, if the user does not exist, I get no reply-attributes,
buecasue the query at the radreply table gets nothing.
But the thing is that the user exists but there was a password failure
.... and got the reply attributes !!!! I believe that if there is an
access-reject with the authorize_check_query, authorize_reply_query
should not be executed.

Has anybody else got this error ?

Best Regards,

Lucas

--=20
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.10.1 - Release Date: 20/04/2005
=20


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html