Use correct namespace when resolving children of FR_TYPE_GROUP

diff --git a/src/lib/server/tmpl_tokenize.c b/src/lib/server/tmpl_tokenize.c
index 0d5dede74f1993c3b3b168b8e5e1bff01b24ca4f..6eb4e038c882839852bb3574449c4e4069534a78 100644 (file)
--- a/src/lib/server/tmpl_tokenize.c
+++ b/src/lib/server/tmpl_tokenize.c
@@ -547,7 +547,10 @@ static fr_slen_t tmpl_request_ref_list_from_substr(TALLOC_CTX *ctx, tmpl_attr_er
         */
        if (namespace) {
                if (at_rules->namespace) {
-                       *namespace = at_rules->namespace;
+                       /*
+                        *      If the namespace is FR_TYPE_GROUP use the correct namespace
+                        */
+                       *namespace = at_rules->namespace->type == FR_TYPE_GROUP ? fr_dict_attr_ref(at_rules->namespace) : at_rules->namespace;
                } else {
                        *namespace = NULL;
                }