We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bc7be92 commit cb5a836Copy full SHA for cb5a836
src/modules/rlm_radius/bio.c
@@ -2719,6 +2719,16 @@ static xlat_action_t xlat_radius_client(UNUSED TALLOC_CTX *ctx, UNUSED fr_dcurso
2719
fr_time_t now = fr_time();
2720
home_server_t *old;
2721
2722
+ /*
2723
+ * We can't change secrets on the fly. The home
2724
+ * server has to expire first, and then the
2725
+ * secret can be changed.
2726
+ */
2727
+ if ((home->ctx.radius_ctx.secret_length != secret->vb_length) ||
2728
+ (strcmp(home->ctx.radius_ctx.secret, secret->vb_strvalue) != 0)) {
2729
+ RWDEBUG("The new secret is not the same as the old secret: Ignoring the new one");
2730
+ }
2731
+
2732
fr_rb_expire_update(expire, home, now);
2733
2734
while ((old = fr_dlist_head(&expire->head)) != NULL) {
0 commit comments