From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 28 Apr 2025 19:27:47 +0000 (-0400)
Subject: unconnected replication sockets can only be UDP
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e82c900200e413f66e228fed651f99ff658ae503;p=thirdparty%2Ffreeradius-server.git

unconnected replication sockets can only be UDP
---

diff --git a/src/modules/rlm_radius/rlm_radius.c b/src/modules/rlm_radius/rlm_radius.c
index 4d6ba24030..2352975f95 100644
--- a/src/modules/rlm_radius/rlm_radius.c
+++ b/src/modules/rlm_radius/rlm_radius.c
@@ -795,6 +795,15 @@ check_others:
 			cf_log_err(conf, "Cannot set 'filename' or 'path' when using 'mode=unconnected-replicate'");
 			return -1;
 		}
+
+		/*
+		 *	Unconnected replicate has to use UDP.
+		 */
+		if (inst->fd_config.socket_type != SOCK_DGRAM) {
+			cf_log_err(conf, "Cannot use TCP sockets with 'mode=unconnected-replicate'");
+			return -1;
+		}
+
 		FALL_THROUGH;
 
 	case RLM_RADIUS_MODE_REPLICATE: