From: Alan T. DeKok <aland@freeradius.org>
Date: Wed, 4 Aug 2010 08:34:59 +0000 (+0200)
Subject: Notes on SHOULD set "require_message_authenticator"
X-Git-Tag: release_3_0_0_beta0~1318
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=freeradius.git;a=commitdiff_plain;h=d330e8c7215e7b55f1baa98c940e6571cbac986b

Notes on SHOULD set "require_message_authenticator"
---

diff --git a/raddb/proxy.conf b/raddb/proxy.conf
index f389bbe..5527ce9 100644
--- a/raddb/proxy.conf
+++ b/raddb/proxy.conf
@@ -233,8 +233,13 @@ home_server localhost {
 	#  packets sent to that home server will have a
 	#  Message-Authenticator attribute.
 	#
+	#  We STRONGLY recommend that this flag be set to "yes"
+	#  for ALL home servers.  Doing so will have no performance
+	#  impact on the proxy or on the home servers.  It will,
+	#  however, allow administrators to detect problems earlier.
+	#
 	#  allowed values: yes, no
-	require_message_authenticator = no
+	require_message_authenticator = yes
 
 	#
 	#  If the home server does not respond to a request within