Subject: [AAA-WG]: New Issue: Use of Auth-Request-Type in NASREQ

From: "Kevin Purser" <[email-masked]>
Date: Tue, 21 Aug 2001 17:16:20 -0700

Submitter name: Kevin Purser
  Submitter email address: [email-masked]
  Date first submitted: August 21, 2001
  Reference: none
  Document: NASREQ-07
  Comment type: 'T'echnical
  Priority: '1' Should fix
  Section: 3.0
  Rationale/Explanation of issue:
  In the second paragraph, "...it is possible to send a request for authorization only.  The type of service depends upon the Auth-Request-Type AVP."  However, the use of this AVP is not mandatory in any of the messages defined in the NASREQ application, which may produce situations where the desired functionality (only re-authentication, only re-authorization, or both) is ambiguous.

  Requested change: 
  Make the Auth-Request-Type AVP mandatory in the AAR and DER, and at least optional in the AAA and DEA to allow the AAA server to indicate the desired functionality (only re-authentication, only re-authorization, or both) expected.

  Kev