From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 16 Feb 2024 15:36:54 +0000 (-0500)
Subject: add Message-Authenticator to all Access-Request packets
X-Git-Tag: release_3_2_5~16
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4ee13e6986b61e119d0fae92878f8774d5c1e35d;p=thirdparty%2Ffreeradius-server.git

add Message-Authenticator to all Access-Request packets
---

diff --git a/src/lib/radius.c b/src/lib/radius.c
index 03a91469f00..8f1e558e44d 100644
--- a/src/lib/radius.c
+++ b/src/lib/radius.c
@@ -1921,7 +1921,9 @@ int rad_encode(RADIUS_PACKET *packet, RADIUS_PACKET const *original,
 	 *
 	 *	It must be the FIRST attribute in the packet.
 	 */
-	if (!packet->tls && original && (original->code == PW_CODE_ACCESS_REQUEST)) {
+	if (!packet->tls && 
+	    ((original && (original->code == PW_CODE_ACCESS_REQUEST)) ||
+	     (packet->code == PW_CODE_ACCESS_REQUEST))) {
 		seen_ma = true;
 
 		packet->offset = RADIUS_HDR_LEN;