From: Alan T. DeKok <aland@freeradius.org>
Date: Fri, 10 Feb 2023 23:55:04 +0000 (-0500)
Subject: if there's no Auth-Type, use TACACS.Packet.Authen-Type
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=88604ebf00bdca7356b88662ceafb028bf76191e;p=thirdparty%2Ffreeradius-server.git

if there's no Auth-Type, use TACACS.Packet.Authen-Type
---

diff --git a/src/process/tacacs/base.c b/src/process/tacacs/base.c
index 81217c8d41b..c53c60b0712 100644
--- a/src/process/tacacs/base.c
+++ b/src/process/tacacs/base.c
@@ -473,9 +473,9 @@ RESUME(auth_start)
 	 *	Auth-Type set by the admin, then we use what's in the packet.
 	 */
 	vp = fr_pair_find_by_da(&request->control_pairs, NULL, attr_auth_type);
-	if (!vp) vp = fr_pair_find_by_da(&request->request_pairs, NULL, attr_tacacs_authentication_type);
+	if (!vp) vp = fr_pair_find_by_da_nested(&request->request_pairs, NULL, attr_tacacs_authentication_type);
 	if (!vp) {
-		RDEBUG("No 'Auth-Type' attribute found, cannot authenticate the user - rejecting the request");
+		RDEBUG("No 'Auth-Type' or 'Authentication-Status' attribute found, cannot authenticate the user - rejecting the request");
 
 	reject:
 		request->reply->code = FR_TACACS_CODE_AUTH_FAIL;