(RADIATOR) Bad authenticator for proxied Disconnect-Request

Arjan Waardenburg arjanw at kpn.net
Wed Apr 21 09:13:51 CDT 2004


Hi,

During testing with Disconnect-Request we noticed that Radiator did not
set the authenticator in the forwarded packet to 16 zero octets before
calculating the MD5 hash. Below is the unified diff to fix this.

Regards
Arjan Waardenburg

--- Radius.pm   2004-04-21 16:02:42.000000000 +0200
+++ Radius.new  2004-04-21 16:04:58.000000000 +0200
@@ -917,7 +917,8 @@
  
     my $code = $self->code; # speedup
     $self->set_authenticator("\000" x 16)
-       if $code eq 'Accounting-Request';
+        if ($code eq 'Accounting-Request'
+            || $code eq 'Disconnect-Request');
     my $rec = $self->pack;
     $self->{Packet} = $rec;

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list