anchor.diff:  							RadiusID, [], RequestAuthenticator, Secret, RadiusFsm),
   					{stop, {shutdown, SessionID}, StateData};
   				{'EXIT', _Reason} ->
  -					radius:response(RadiusFsm, {error, ignore}),
  +					EapPacket = #eap_packet{code = failure, identifier = EapID},
  +					send_response(EapPacket, ?AccessReject,
  +							RadiusID, [], RequestAuthenticator, Secret, RadiusFsm),
   					{stop, {shutdown, SessionID}, StateData}
   			end;
   		{error, not_found} ->
  
positive.code: 		confirm1(RadiusFsm, AccessRequest, NewStateData)
  	catch
  		_:_ ->
  			radius:response(RadiusFsm, {error, ignore}),
  			{stop, {shutdown, SessionID}, StateData}
  	end.
  %% @hidden
  
negative.code: 	case catch ocs_eap_pwd:compute_ks(<<Srand:256>>,
  			PWE, ScalarP, ElementP) of
  		{'EXIT', _Reason} ->
  			EapPacket = #eap_packet{code = failure, identifier = EapID},
  			send_response(EapPacket, ?AccessReject,
  					RadiusID, [], RequestAuthenticator, Secret, RadiusFsm),
  			{stop, {shutdown, SessionID}, StateData};
  		Ks ->
  			Ciphersuite = <<GroupDesc:16, RandFunc, PRF>>,
  			Input = [Ks, ElementS, ScalarS, ElementP, ScalarP, Ciphersuite],
  