From: Nick Porter <nick@portercomputing.co.uk>
Date: Wed, 26 Jul 2023 10:03:06 +0000 (+0100)
Subject: Set the secret flag of User-Message based on the attribute it really holds
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=48c53a968cc737d76c7f9ffc59bf0964c9640c0e;p=thirdparty%2Ffreeradius-server.git

Set the secret flag of User-Message based on the attribute it really holds
---

diff --git a/src/process/tacacs/base.c b/src/process/tacacs/base.c
index 9c6fa57a474..a67dbc1c90a 100644
--- a/src/process/tacacs/base.c
+++ b/src/process/tacacs/base.c
@@ -928,6 +928,7 @@ RECV(auth_cont)
 #define EXTRACT(_attr) \
 	vp = fr_pair_find_by_da(&request->request_pairs, NULL, attr_tacacs_user_message); \
 	if (!vp) break; \
+	fr_value_box_set_secret(&vp->data, _attr->flags.secret); \
 	if (pair_append_request(&copy, _attr) < 0) break; \
 	if (fr_pair_value_copy(copy, vp) < 0) { \
 		fr_pair_remove(&request->request_pairs, copy); \