[Avi] I agree with David. Call-Check is Pre-authentication, there is no prior user-session.
Right. This seems like a mistake in RFC 2865. We probably should explicitly address this in the document.
[Avi] I think an Access-Request with Service-Type set to Call-Check MUST NOT contain State. However, making that restriction may break existing deployements -- Issues and Fixes should not break existing deployements. Snip....
If it breaks existing deployments, I'd like to know where they got the State Attribute from :)
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>