patchinfo: 2169 Send authentication reject in case of a malformed user
Maurice Makaay <[email protected]> Wed, 29 Oct 2003 22:53:46 +0100
| Newsgroups | gmane.comp.gnu.radius.bugs |
|---|---|
| Organization | InterNLnet BV |
| Message-ID | <[email protected]> |
2169 Send authentication reject in case of a malformed user ---------------------------------------------------------------------- In case of malformed users in an authentication request, the radius server does not send any reply and just increments a bad request counter for the radius client. I do not think that this is correct, since I see no real difference between a non-existant username and a malformed username. I patched radiusd/auth.c to send a reject packet in case of a malformed user. This problem was noticed by one of our upstream access providers who complained that our radius servers were not always responding. In fact, the problem was that some users had mistyped their username in the dial-up connection and our radius severs were ignoring the authentication request. This patch fixed this problem completely. If there is a good reason for not sending back a reject, please let me know and I'll update the patch to make it configurable using the server configuration file. ---------------------------------------------------------------------- With kind regards, Maurice Makaay InterNLnet BV The Netherlands