Re: [RADIATOR] Reply packet too long

2011-09-15 Thread Heikki Vatiainen
On 09/15/2011 10:26 AM, Markus Ludwig Grandpre wrote: Hello Markus, >>> Try this instead: >>> >>> AddToReply SAML-AAA-Assertion=part1,SAML-AAA-Assertion=part2, ... >>> >>> That is, use AddToReply only once but with multiple attributes. >> >> did not work. Access-Accept is too long again > > It w

Re: [RADIATOR] Reply packet too long

2011-09-15 Thread Markus Ludwig Grandpre
Hello Heikki >> Try this instead: >> >> AddToReply SAML-AAA-Assertion=part1,SAML-AAA-Assertion=part2, ... >> >> That is, use AddToReply only once but with multiple attributes. > > did not work. Access-Accept is too long again It worked after I've had distributed SAML content to 9 packets. Thank

Re: [RADIATOR] Reply packet too long

2011-09-14 Thread Markus Ludwig Grandpre
Heikki, > Try this instead: > > AddToReply SAML-AAA-Assertion=part1,SAML-AAA-Assertion=part2, ... > > That is, use AddToReply only once but with multiple attributes. This configuration as you have suggested: AddToReply SAML-AAA-Assertion = urn:mace:incommon:osu.edu, SAML-AAA-Assertion = canto

Re: [RADIATOR] Reply packet too long

2011-09-14 Thread Heikki Vatiainen
On 09/14/2011 03:19 PM, Markus Ludwig Grandpre wrote: >> Try adding three SAML-AAA-Assertion attributes instead of one. Your >> attribute seems to be over 600 characters which is way more than the 8 >> bit attribute length field can carry. >> >> The receiver may be able to concatenate the attribut

Re: [RADIATOR] Reply packet too long

2011-09-14 Thread Markus Ludwig Grandpre
Hello Heikki > Try adding three SAML-AAA-Assertion attributes instead of one. Your > attribute seems to be over 600 characters which is way more than the 8 > bit attribute length field can carry. > > The receiver may be able to concatenate the attributes back into one value. Yes, the receiver is

Re: [RADIATOR] Reply packet too long

2011-09-14 Thread Heikki Vatiainen
On 09/14/2011 02:41 PM, Markus Ludwig Grandpre wrote: Hello Markus, > I try to send a SAML assertion as an attribute in a Access-Accept > packet, but packet is too long (when using UDP). Is there a possibility > to distribute content of Access-Accept packet to several packets? Try adding three S

[RADIATOR] Reply packet too long

2011-09-14 Thread Markus Ludwig Grandpre
Hello list, I try to send a SAML assertion as an attribute in a Access-Accept packet, but packet is too long (when using UDP). Is there a possibility to distribute content of Access-Accept packet to several packets? Your help is appreciated, Markus Grandpre, RZ Uni Konstanz Radiator configurati