From 09603a048bafbfa1881a03ce0e0d9127ec78c3ae Mon Sep 17 00:00:00 2001
From: aland <aland>
Date: Fri, 9 May 2008 05:45:12 +0000
Subject: [PATCH] 	Permit authorize_reply_query to be empty.  The check
 pairs 	can update the "control" list, so this is still useful

---
 src/modules/rlm_sql/rlm_sql.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/modules/rlm_sql/rlm_sql.c b/src/modules/rlm_sql/rlm_sql.c
index e23d848..344fbb4 100644
--- a/src/modules/rlm_sql/rlm_sql.c
+++ b/src/modules/rlm_sql/rlm_sql.c
@@ -857,6 +857,7 @@ static int rlm_sql_instantiate(CONF_SECTION * conf, void **instance)
 		rlm_sql_detach(inst);
 		return -1;
 	}
+
 	paircompare_register(PW_SQL_GROUP, PW_USER_NAME, sql_groupcmp, inst);
 
 	if (inst->config->do_clients){
@@ -942,6 +943,9 @@ static int rlm_sql_authorize(void *instance, REQUEST * request)
 		if (paircompare(request, request->packet->vps, check_tmp, &request->reply->vps) == 0) {
 			found = 1;
 			DEBUG2("rlm_sql (%s): User found in radcheck table", inst->config->xlat_name);
+
+			if (inst->config->authorize_reply_query) {
+
 			/*
 			 *	Now get the reply pairs since the paircompare matched
 			 */
@@ -964,10 +968,12 @@ static int rlm_sql_authorize(void *instance, REQUEST * request)
 				pairfree(&reply_tmp);
 				return RLM_MODULE_FAIL;
 			}
+
 			if (!inst->config->read_groups)
 				dofallthrough = fallthrough(reply_tmp);
 			pairxlatmove(request, &request->reply->vps, &reply_tmp);
 			pairxlatmove(request, &request->config_items, &check_tmp);
+			}
 		}
 	}
 
-- 
2.1.4