Radius DAS won't work

Robert Plestenjak robert.plestenjak at xlab.si
Thu Feb 6 09:24:45 EST 2014

When I send disconnect message, I get this:

# cat ~/packet.txt | radclient -x disconnect supersecret
Sending Disconnect-Request of id 224 to port 3799
	Acct-Session-Id = "52F38076-00000003"
	User-Name = "janez"
	NAS-IP-Address =
rad_recv: Disconnect-NAK packet from host port 3799, id=224, length=50
rad_verify: Received packet from with invalid Message-Authenticator!  (Shared secret is incorrect.)

Hostapd logs this:
DAS: Received 52 bytes from
DAS: Unsupported attribute 4 in Disconnect-Request from
DAS: Reply to

My disconnect message (package.txt):
Acct-Session-Id = "52F38076-00000003"
User-Name = "janez"
NAS-IP-Address = ""

My DAS config:
radius_das_client= supersecret

First I thought Radius sends attribute 4 and not 40, but I confirmed it's 40 with tcpdump and wireshark.

More information about the HostAP mailing list