don't include the challenge

diff --git a/src/protocols/tacacs/decode.c b/src/protocols/tacacs/decode.c
index de91c162b94dc897119a9cc45e239c68f53f2832..8e27e00e8438547f90cbbf52e9354fb8d8a9e801 100644 (file)
--- a/src/protocols/tacacs/decode.c
+++ b/src/protocols/tacacs/decode.c
@@ -581,7 +581,7 @@ ssize_t fr_tacacs_decode(TALLOC_CTX *ctx, fr_pair_list_t *out, uint8_t const *bu
                                break;
 
                        case FR_AUTHENTICATION_TYPE_VALUE_MSCHAPV2:
-                               want = 1 + 16 + 49; /* id + HOPEFULLY 16 octets of challenge + 49 MS-CHAP stuff */
+                               want = 1 + 49; /* id + HOPEFULLY 16 octets of challenge + 49 MS-CHAP stuff */
                                da = attr_tacacs_mschap2_response;
                                challenge = attr_tacacs_mschap_challenge;
                                break;