reply packets use request authenticator for Message-Authenticator

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 47de3b971d5b8cf4af13a182c5d8a70d2e7d22e8..bcca0c7aa6137706836148347fef2a452df2f5d8 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -2067,11 +2067,7 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
 
                case PW_CODE_ACCOUNTING_REQUEST:
                case PW_CODE_DISCONNECT_REQUEST:
-               case PW_CODE_DISCONNECT_ACK:
-               case PW_CODE_DISCONNECT_NAK:
                case PW_CODE_COA_REQUEST:
-               case PW_CODE_COA_ACK:
-               case PW_CODE_COA_NAK:
                        memset(hdr->vector, 0, AUTH_VECTOR_LEN);
                        break;
 
@@ -2079,6 +2075,10 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
                case PW_CODE_ACCESS_ACCEPT:
                case PW_CODE_ACCESS_REJECT:
                case PW_CODE_ACCESS_CHALLENGE:
+               case PW_CODE_DISCONNECT_ACK:
+               case PW_CODE_DISCONNECT_NAK:
+               case PW_CODE_COA_ACK:
+               case PW_CODE_COA_NAK:
                        memcpy(hdr->vector, original->vector, AUTH_VECTOR_LEN);
                        break;