On Oct 8, 2026, at 6:58 AM, Kushal Gupta <kushalgupta.me@gmail.com> wrote:
I'm running FreeRADIUS 3.2.5 (Ubuntu 24.04 package)
You should really upgrade, and use the packages from https://packages.inkbridgenetworks.com/ We're also releasing 3.2.11 shortly, which will have more fixes.
with clients loaded from the nas table (rlm_sql, read_clients = yes, stock client_query). The NASes are MikroTik routers. In radiusd.conf:
security { require_message_authenticator = yes limit_proxy_state = auto }
These settings don't apply to clients read from SQL. They do apply to clients from clients.conf.
I've pushed a patch which fixes this. In the interest of *not* breaking peoples systems on upgrade, the behavior change is controlled by a configuration flag. See https://github.com/FreeRADIUS/freeradius-server/blob/v3.2.x/raddb/radiusd.co... This fix will be in 3.2.11 when it's released. Alan DeKok.