if there's no Auth-Type, use TACACS.Packet.Authen-Type

diff --git a/src/process/tacacs/base.c b/src/process/tacacs/base.c
index 81217c8d41b857e5846864131fb57de53363a242..c53c60b07121b2b6448512d6f583ddcbe657ec44 100644 (file)
--- a/src/process/tacacs/base.c
+++ b/src/process/tacacs/base.c
@@ -473,9 +473,9 @@ RESUME(auth_start)
         *      Auth-Type set by the admin, then we use what's in the packet.
         */
        vp = fr_pair_find_by_da(&request->control_pairs, NULL, attr_auth_type);
-       if (!vp) vp = fr_pair_find_by_da(&request->request_pairs, NULL, attr_tacacs_authentication_type);
+       if (!vp) vp = fr_pair_find_by_da_nested(&request->request_pairs, NULL, attr_tacacs_authentication_type);
        if (!vp) {
-               RDEBUG("No 'Auth-Type' attribute found, cannot authenticate the user - rejecting the request");
+               RDEBUG("No 'Auth-Type' or 'Authentication-Status' attribute found, cannot authenticate the user - rejecting the request");
 
        reject:
                request->reply->code = FR_TACACS_CODE_AUTH_FAIL;