add Message-Authenticator to all Access-Request packets

diff --git a/src/lib/radius.c b/src/lib/radius.c
index f907617227d7997bdc836da4c5c729ba10007d91..d4b606c0f691d5c5893acf05e5455bcd2847867d 100644 (file)
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -1876,7 +1876,9 @@ int rad_encode(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
         *
         *      It must be the FIRST attribute in the packet.
         */
-       if (!packet->tls && original && (original->code == PW_CODE_ACCESS_REQUEST)) {
+       if (!packet->tls && 
+           ((original && (original->code == PW_CODE_ACCESS_REQUEST)) ||
+            (packet->code == PW_CODE_ACCESS_REQUEST))) {
                seen_ma = true;
 
                packet->offset = RADIUS_HDR_LEN;