Message Authenticator attribute is missing

[Alan DeKok]

On May 19, 2024, at 7:29 PM, Amit P <amit.subscription at gmail.com> wrote:
> 
> i am testing one basic authentication scenario using freeradius.
> The client is getting successfully authenticated but i am not seeing any
> "Message-Authenticator" attribute in the Access-Accept or Access-Reject
> packets.
> 
> Does server not send "Message-Authenticator" attribute by default?

  The server sends Message-Authenticator when:

a) it's required by the RFCs (e.g. with EAP-Message)

b) when you tell it to reply with Message-Authenticator

> How we can enable freeradius server to send "Message-Authenticator"
> attribute  for all response packets?

  update reply {
		Message-Authenticator := 0x00
  }

  The server will automatically calculate the correct value.

  Alan DeKok.