From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 20 Apr 2020 19:17:00 +0000 (-0400)
Subject: error out on TCP / TLS home servers
X-Git-Tag: release_3_0_22~602
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=adac1e409fc4a2ff2a1b864e09d0e77b0d294c0e;p=thirdparty%2Ffreeradius-server.git

error out on TCP / TLS home servers
---

diff --git a/src/modules/rlm_replicate/rlm_replicate.c b/src/modules/rlm_replicate/rlm_replicate.c
index aaba1da136b..def0d05dc10 100644
--- a/src/modules/rlm_replicate/rlm_replicate.c
+++ b/src/modules/rlm_replicate/rlm_replicate.c
@@ -114,6 +114,20 @@ static int replicate_packet(UNUSED void *instance, REQUEST *request, pair_lists_
 			continue;
 		}
 
+#ifdef WITH_TCP
+		if (home->proto != IPPROTO_UDP) {
+			REDEBUG("The replicate module only does UDP - Cannot send to TCP home_server %s", home->name);
+			continue;
+		}
+#endif
+
+#ifdef WITH_TCP
+		if (home->tls) {
+			REDEBUG("The replicate module only does UDP - Cannot send to TLS home_server %s", home->name);
+			continue;
+		}
+#endif
+
 		/*
 		 *	For replication to multiple servers we re-use the packet
 		 *	we built here.