Internal attributes can be inside group attributes

diff --git a/src/protocols/internal/decode.c b/src/protocols/internal/decode.c
index 690906aafc7c64676134221bf6abf2bb7fd5552d..1e64d6584e0416c38b37e30e7f7558bd5e636474 100644 (file)
--- a/src/protocols/internal/decode.c
+++ b/src/protocols/internal/decode.c
@@ -242,7 +242,7 @@ static ssize_t internal_decode_pair(TALLOC_CTX *ctx, fr_pair_list_t *out, fr_dic
         *      so it's fine to swap the parent_da.
         */
        if (internal) {
-               if (!parent_da->flags.is_root) {
+               if (!parent_da->flags.is_root && !(parent_da->type == FR_TYPE_GROUP)) {
                        fr_strerror_printf("%s: Internal flag can only be set on top level attribute", __FUNCTION__);
                        return PAIR_DECODE_FATAL_ERROR;
                }