The freeradius-client does not handle Access-Challenge response from a server, internally setting the status to BADRESP_RC. I have a patch available, but need to clear it with my management before posting.