otp_authenticate(): set e_length correctly

diff --git a/src/modules/rlm_otp/otp_rlm.c b/src/modules/rlm_otp/otp_rlm.c
index 23a8b71..0f82394 100644 (file)
--- a/src/modules/rlm_otp/otp_rlm.c
+++ b/src/modules/rlm_otp/otp_rlm.c
@@ -482,7 +482,7 @@ otp_authenticate(void *instance, REQUEST *request)
     if ((vp = pairfind(request->packet->vps, PW_STATE)) != NULL) {
       /* set expected State length */
       if (inst->allow_async)
-        e_length += inst->chal_len * 2 + 8 + 8 + 32; /* see otp_gen_state() */
+        e_length = inst->chal_len * 2 + 8 + 8 + 32; /* see otp_gen_state() */
       else
         e_length = 1;