From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Fri, 7 Oct 2011 09:45:12 +0000 (+0200)
Subject: Add a Message-Authenticator attribute to the response, if we added EAP-Message
X-Git-Tag: release_3_0_0_beta0~609
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6952dd543cc739198ce211cfa88e4e106bfc96f8;p=thirdparty%2Ffreeradius-server.git

Add a Message-Authenticator attribute to the response, if we added EAP-Message
---

diff --git a/src/modules/rlm_eap/rlm_eap.c b/src/modules/rlm_eap/rlm_eap.c
index 4dbbf8dc15a..38938f6b2b5 100644
--- a/src/modules/rlm_eap/rlm_eap.c
+++ b/src/modules/rlm_eap/rlm_eap.c
@@ -770,6 +770,18 @@ static int eap_post_auth(void *instance, REQUEST *request)
 	RDEBUG2("Request was previously rejected, inserting EAP-Failure");
 	eap_fail(handler);
 	eap_handler_free(inst, handler);
+	
+	/*
+	 * Make sure there's a message authenticator attribute in the response
+	 * RADIUS protocol code will calculate the correct value later...
+	 */
+	vp = pairfind(request->reply->vps, PW_MESSAGE_AUTHENTICATOR, 0);
+	if (!vp) {
+		vp = pairmake("Message-Authenticator",
+				  "0x00", T_OP_EQ);
+		rad_assert(vp != NULL);
+		pairadd(&(request->reply->vps), vp);
+	}
 
 	return RLM_MODULE_UPDATED;
 }