>>>>> "Sam" == Sam Hartman <hartmans-i...@mit.edu> writes:
Sam> We noticed a situation where our AAA server was generating a
Sam> channel binding response that was rejected by our supplicant
Sam> code.
Sam> We looked into things and determined that the server was
Sam> generating a single octet failure response (code 3) and was
Sam> including no attributes.
Actually, our debugging code was confusing.
The server is generating a code 3, the RADIUS NSID, and a length of 0
for that NSID.
After reading section 5.3, I think it's ambiguous whether this is
permitted.
I'm going to change the server code to generate no NSID or length in
this situation because as discussed previously that is clearly
permitted.
I'd be interested in opinions about what clients should do in the case
where tan NSID with 0 length is received.
_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
