<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="SV" style="font-size:11.0pt">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">So I was finally able to try this.. and it didn’t work out of the box.. I had to add a “StripFromReply Message-Authenticator” too .. otherwise it added the Message-Authenticator anyway..<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">But yes it fixed the issue with the device I had problems with..<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="SV" style="font-size:10.0pt;font-family:Consolas">---<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="font-size:10.0pt;font-family:Consolas">Med vänlig hälsning<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="SV" style="font-size:10.0pt;font-family:Consolas">Patrik Forsberg<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="SV" style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> radiator <radiator-bounces@lists.open.com.au>
<b>On Behalf Of </b>Patrik Forsberg via radiator<br>
<b>Sent:</b> Thursday, September 12, 2024 9:35 AM<br>
<b>To:</b> Heikki Vatiainen <hvn@open.com.au>; radiator@lists.open.com.au<br>
<b>Subject:</b> Re: [RADIATOR] move Message-Authenticator to the top ?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Thank you, if it fixes the issue I'll get back to you with vendor and model :)<o:p></o:p></p>
</div>
<div id="ms-outlook-mobile-signature">
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"></span>--- <o:p>
</o:p></p>
<div>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Patrik<o:p></o:p></p>
</div>
</div>
<div id="mail-editor-reference-message-container">
<p class="MsoNormal"><o:p> </o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><strong><span style="font-size:11.0pt;font-family:"Aptos",sans-serif">Från:</span></strong><span style="font-size:11.0pt"> radiator <<a href="mailto:radiator-bounces@lists.open.com.au">radiator-bounces@lists.open.com.au</a>> på uppdrag
av Heikki Vatiainen via radiator <<a href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a>><br>
<strong><span style="font-family:"Aptos",sans-serif">Skickat:</span></strong> onsdag, september 11, 2024 9:48:49 PM<br>
<strong><span style="font-family:"Aptos",sans-serif">Till:</span></strong> <a href="mailto:radiator@lists.open.com.au">
radiator@lists.open.com.au</a> <<a href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a>><br>
<strong><span style="font-family:"Aptos",sans-serif">Ämne:</span></strong> Re: [RADIATOR] move Message-Authenticator to the top ?<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><br>
<br>
<span style="font-size:11.0pt"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">On 11.9.2024 14.00, Patrik Forsberg wrote:<br>
<br>
> Follow up question on this .. is there a way to disable sending the Message-Authenticator attribute ? .. I know I know but I think I ran into a device that actually _hate_ this attribute for some weird reason.. at least it worked prior to upgrading and now
it doesn't .. so at least to exclude this possibility it would be good to be able to remove it without degrading Radiator..<br>
<br>
See if this works:<br>
<br>
<Client 127.0.0.1><br>
Identifier loopback-client<br>
Secret mysecret<br>
</Client><br>
<br>
<Handler><br>
<AuthBy FILE><br>
Filename %D/users<br>
</AuthBy><br>
<br>
PostAuthHook sub { my $p = ${$_[0]}; \<br>
$p->{rp}->{skip_message_authenticator} = 1 \<br>
if $p->{Client}->{Identifier} eq 'loopback-client'; }<br>
</Handler><br>
<br>
The idea is to see if the request was received from a problematic <br>
client. If it was, then the reply is tagged with a special flag that <br>
suppresses Message-Authenticator. This is sometimes needed for odd <br>
Radius dynauth servers etc. This flag should be considered an internal <br>
flag and if the need for a configuration option arises then we can <br>
consider it. However, it should allow you to check if it makes the <br>
client work again.<br>
<br>
Please let me know if you can tell what's the device in question.<br>
<br>
Thanks,<br>
Heikki<br>
<br>
--<br>
Heikki Vatiainen<br>
Radiator Software, makers of Radiator<br>
Visit radiatorsoftware.com for Radiator AAA server software<br>
<br>
_______________________________________________<br>
radiator mailing list<br>
<a href="mailto:radiator@lists.open.com.au">radiator@lists.open.com.au</a><br>
<a href="https://lists.open.com.au/mailman/listinfo/radiator">https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.open.com.au%2Fmailman%2Flistinfo%2Fradiator&data=05%7C02%7Cpatrik.forsberg%40globalconnect.se%7C39c9543d5fe243af827408dcd29abedc%7Cdfbb0d3b8276458197a42b844a84ea35%7C0%7C0%7C638616809295423648%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=PHYfC7uVzhZQ37yzNkEf7VaPHlcDWd50W3l7ZYIBF%2FU%3D&reserved=0</a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>