diff --git a/lib/radius.js b/lib/radius.js index 3a97dab..9495daf 100644 --- a/lib/radius.js +++ b/lib/radius.js @@ -415,6 +415,10 @@ Radius._verify_response_message_authenticator = function(args) { secret: args.secret }); + // Response packets for `Status-Server` requests do not have a `Message-Authenticator` attribute hence + // no need to verify response message authenticator + if (parsed_request.code === "Status-Server") return true; + if (parsed_request.attributes["Message-Authenticator"]) { var parsed_response = this.decode({ packet: args.response,