this was actually one of the last bullets in my summary. in the usage scenario avi described the outcome of this interaction would not be equal to an access-reject. instead the aaa server would just grant access to the basic services and access to enhanced services is offered only if location information is provided.
The problem with this is that it violates a MUST of RFC 2865. If the server is ok without location in the Access-Request, then it can send an Access-Accept instead of a Challenge.
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>