tokens: ['EAPbased', 'secondary', 'authentication', 'and', 'authorization', 'at', 'PDU', 'Session', 'establishment', 'is', 'supported', 'as', 'defined', 'in', 'clause', '', 'EAPbased', 'secondary', 'authentication', 'and', 'authorization', 'at', 'PDN', 'connection', 'establishment', 'is', 'supported', 'as', 'defined', 'in', 'Annex', 'H', 'This', 'clause', 'a', 'defines', 'the', 'support', 'of', 'secondary', 'authorization', 'over', 'EPS', 'without', 'EAPbased', 'authentication', 'when', 'one', 'of', 'the', 'UE', 'the', 'GC', 'and', 'the', 'DN', 'does', 'not', 'support', 'or', 'is', 'configured', 'not', 'to', 'use', 'the', 'mechanisms', 'defined', 'in', 'Annex', 'H', 'NOTE', '', 'This', 'implies', 'that', 'when', 'data', 'connectivity', 'to', 'the', 'DN', 'is', 'initiated', 'as', 'a', 'PDU', 'Session', 'over', 'GC', 'it', 'can', 'be', 'subject', 'to', 'EAP', 'based', 'secondary', 'authentication', 'mechanism', 'see', 'TS', '', 'Security', 'architecture', 'and', 'procedures', 'for', 'G', 'System', '', '', 'whereas', 'when', 'data', 'connectivity', 'to', 'the', 'same', 'DN', 'is', 'initiated', 'as', 'a', 'PDN', 'connection', 'over', 'EPC', 'it', 'cannot', 'be', 'subject', 'to', 'EAP', 'based', 'secondary', 'authentication', 'mechanism', 'This', 'discrepancy', 'occurs', 'regardless', 'of', 'whether', 'the', 'data', 'connection', 'is', 'later', 'on', 'moved', 'between', 'EPC', 'and', 'GC', 'NOTE', '', 'Secondary', 'authorization', 'without', 'authentication', 'means', 'no', 'signalling', 'exchange', 'with', 'the', 'UE', 'If', 'secondary', 'authentication', 'and', 'authorization', 'has', 'been', 'performed', 'for', 'the', 'PDU', 'Session', 'while', 'the', 'UE', 'was', 'in', 'GS', 'and', 'the', 'UE', 'has', 'moved', 'to', 'EPS', 'the', 'following', 'applies', '', 'DNAAA', 'reauthorization', 'without', 'reauthentication', 'signalling', 'can', 'be', 'performed', 'even', 'when', 'the', 'UE', 'is', 'in', 'EPS', 'eg', 'to', 'provide', 'new', 'parameters', 'from', 'the', 'DNAAA', 'Server', 'to', 'SMFPGWC', '', 'Reauthentication', 'cannot', 'be', 'performed', 'while', 'the', 'UE', 'is', 'in', 'EPS', 'because', 'there', 'is', 'no', 'support', 'of', 'the', 'related', 'signalling', 'in', 'EPS', 'In', 'case', 'the', 'SMFPGWC', 'receives', 'a', 'reauthentication', 'request', 'from', 'the', 'DNAAA', 'the', 'SMFPGWC', 'informs', 'the', 'DNAAA', 'Server', 'that', 'the', 'UE', 'is', 'not', 'available', 'for', 'reauthentication', 'at', 'the', 'moment', 'The', 'SMFPGWC', 'should', 'not', 'initiate', 'PDN', 'connection', 'release', 'at', 'this', 'point', 'the', 'DNAAA', 'decides', 'the', 'actions', 'to', 'take', 'based', 'on', 'the', 'reply', 'from', 'SMFPGWC', 'and', 'local', 'policy', 'which', 'may', 'also', 'trigger', 'a', 'DNAAA', 'Server', 'request', 'to', 'release', 'the', 'PDU', 'SessionPDN', 'connection', 'of', 'the', 'UE']