From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 31 Oct 2023 22:00:46 +0000 (-0400)
Subject: reply packets use request authenticator for Message-Authenticator
X-Git-Tag: release_3_2_4~127
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1d8b14342415fc92f33ebdd640c92f3d95f77dcc;p=thirdparty%2Ffreeradius-server.git

reply packets use request authenticator for Message-Authenticator
---

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 357d0e8ec9..6aec0f0423 100644
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -2152,11 +2152,7 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
 
 		case PW_CODE_ACCOUNTING_REQUEST:
 		case PW_CODE_DISCONNECT_REQUEST:
-		case PW_CODE_DISCONNECT_ACK:
-		case PW_CODE_DISCONNECT_NAK:
 		case PW_CODE_COA_REQUEST:
-		case PW_CODE_COA_ACK:
-		case PW_CODE_COA_NAK:
 			memset(hdr->vector, 0, AUTH_VECTOR_LEN);
 			break;
 
@@ -2164,6 +2160,10 @@ int rad_sign(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
 		case PW_CODE_ACCESS_ACCEPT:
 		case PW_CODE_ACCESS_REJECT:
 		case PW_CODE_ACCESS_CHALLENGE:
+		case PW_CODE_DISCONNECT_ACK:
+		case PW_CODE_DISCONNECT_NAK:
+		case PW_CODE_COA_ACK:
+		case PW_CODE_COA_NAK:
 			memcpy(hdr->vector, original->vector, AUTH_VECTOR_LEN);
 			break;