From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 7 Sep 2023 17:17:06 +0000 (-0400)
Subject: the RADIUS protocol cannot encode attributes of type 'group'
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=08d5850ee3732260656290d07f40f9529bccb9dc;p=thirdparty%2Ffreeradius-server.git

the RADIUS protocol cannot encode attributes of type 'group'
---

diff --git a/src/protocols/radius/base.c b/src/protocols/radius/base.c
index 3bab0e39f1f..d1534b31c6c 100644
--- a/src/protocols/radius/base.c
+++ b/src/protocols/radius/base.c
@@ -1145,6 +1145,14 @@ static bool attr_valid(UNUSED fr_dict_t *dict, fr_dict_attr_t const *parent,
 		return true;
 	}
 
+	/*
+	 *	The RADIUS encoder does not handle groups.
+	 */
+	if ((type == FR_TYPE_GROUP) && !flags->internal) {
+		fr_strerror_const("The RADIUS protocol cannot encode attributes of type 'group'");
+		return false;
+	}
+
 	if (flag_extended(flags)) {
 		if (type != FR_TYPE_TLV) {
 			fr_strerror_const("The 'long' or 'extended' flag can only be used for attributes of type 'tlv'");