From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 6 Feb 2023 13:47:47 +0000 (-0500)
Subject: relax checks.  it seems clients don't pay attention to this.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5a926f0ab82af75c163e19eb4ea62dba5eddd446;p=thirdparty%2Ffreeradius-server.git

relax checks.  it seems clients don't pay attention to this.
---

diff --git a/src/protocols/tacacs/decode.c b/src/protocols/tacacs/decode.c
index d3288dd5830..28d696a501a 100644
--- a/src/protocols/tacacs/decode.c
+++ b/src/protocols/tacacs/decode.c
@@ -496,11 +496,13 @@ ssize_t fr_tacacs_decode(TALLOC_CTX *ctx, fr_pair_list_t *out, uint8_t const *bu
 			p = BODY(authen_start);
 			PACKET_HEADER_CHECK("Authentication Start");
 
+#if 0
 			if ((pkt->hdr.ver.minor == 0) &&
 			    (pkt->authen_start.authen_type != FR_AUTHENTICATION_TYPE_VALUE_ASCII)) {
 				fr_strerror_const("TACACS+ minor version 1 MUST be used for non-ASCII authentication methods");
 				goto fail;
 			}
+#endif
 
 			DECODE_FIELD_UINT8(attr_tacacs_packet_body_type, FR_PACKET_BODY_TYPE_START);