reply packets use request authenticator for Message-Authenticator

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 357d0e8ec9551d570af50fcab5036145804bcda2..6aec0f042333a3980d9a215435b1baf382651086 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -2152,11 +2152,7 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
 
                case PW_CODE_ACCOUNTING_REQUEST:
                case PW_CODE_DISCONNECT_REQUEST:
-               case PW_CODE_DISCONNECT_ACK:
-               case PW_CODE_DISCONNECT_NAK:
                case PW_CODE_COA_REQUEST:
-               case PW_CODE_COA_ACK:
-               case PW_CODE_COA_NAK:
                        memset(hdr->vector, 0, AUTH_VECTOR_LEN);
                        break;
 
@@ -2164,6 +2160,10 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
                case PW_CODE_ACCESS_ACCEPT:
                case PW_CODE_ACCESS_REJECT:
                case PW_CODE_ACCESS_CHALLENGE:
+               case PW_CODE_DISCONNECT_ACK:
+               case PW_CODE_DISCONNECT_NAK:
+               case PW_CODE_COA_ACK:
+               case PW_CODE_COA_NAK:
                        memcpy(hdr->vector, original->vector, AUTH_VECTOR_LEN);
                        break;