31 Aug
2014
31 Aug
'14
8:45 a.m.
Axel Luttgens wrote:
While confronting my config attempts with various scenarios, I noticed that the Message-Authenticator seems to always be displayed as a sequence of null bytes:
Yes. It's printed out before it's calculated. The exact value of Message-Authenticator doesn't matter. You don't care what it is in the debug output. You have no way of verifying that it's correct. So it might as well be all zeros.
BTW, out of curiosity, attribute User-Name appears to be unconditionally added to the Acces-Accept packet; is this common practice?
Read RFC 3579. Alan DeKok.