From ea6bf44ba891a4d5b7c921c78e6cc697d349515a Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" Date: Fri, 16 Feb 2024 10:36:54 -0500 Subject: [PATCH] add Message-Authenticator to all Access-Request packets --- src/lib/radius.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/lib/radius.c b/src/lib/radius.c index f907617227..d4b606c0f6 100644 --- a/src/lib/radius.c +++ b/src/lib/radius.c @@ -1876,7 +1876,9 @@ int rad_encode(RADIUS_PACKET *packet, RADIUS_PACKET const *original, * * It must be the FIRST attribute in the packet. */ - if (!packet->tls && original && (original->code == PW_CODE_ACCESS_REQUEST)) { + if (!packet->tls && + ((original && (original->code == PW_CODE_ACCESS_REQUEST)) || + (packet->code == PW_CODE_ACCESS_REQUEST))) { seen_ma = true; packet->offset = RADIUS_HDR_LEN; -- 2.47.3