RE: Issue 215

["Bernard Aboba" <bernard_aboba@hotmail.com>]

To:
  In order to provide a State attribute to the NAS, a server sending a
  CoA-Request with a Service-Type value of
  "Authorize-Only" MUST include a State Attribute, and the NAS MUST
  include the State Attribute unchanged in the Access-Request.  A NAS
  receiving a CoA-Request containing a Service-
  Type value of "Authorize-Only" but lacking a State attribute MUST
  send a CoA-NAK or Disconnect-NAK and SHOULD include an Error-Cause
  attribute with value 402 (Missing Attribute).

[BA] I think that "or Disconnect-NAK" should be deleted here, since that 
won't be sent in response to a CoA-Request.

To:
     "Unsupported Service" is a fatal error sent if a Service-Type
     Attribute included with the Request is sent with an invalid or
     unsupported value.  Only valid when performing Change of
     Authorization.

[BA] How about if we say "This error cannot be sent in response to a 
Disconnect-Request." for the last sentence?

In Appendix A - Changes from RFC 3576
**************************************

Add:

Disallowed usage of Service-Type and State attribute in
Disconnect-Message

[BA] How about:

  o Use of a Service-Type Attribute within a Disconnect-Request is 
prohibited (Section 4).



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>