From d330e8c7215e7b55f1baa98c940e6571cbac986b Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" Date: Wed, 4 Aug 2010 10:34:59 +0200 Subject: [PATCH] Notes on SHOULD set "require_message_authenticator" --- raddb/proxy.conf | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/raddb/proxy.conf b/raddb/proxy.conf index f389bbe..5527ce9 100644 --- a/raddb/proxy.conf +++ b/raddb/proxy.conf @@ -233,8 +233,13 @@ home_server localhost { # packets sent to that home server will have a # Message-Authenticator attribute. # + # We STRONGLY recommend that this flag be set to "yes" + # for ALL home servers. Doing so will have no performance + # impact on the proxy or on the home servers. It will, + # however, allow administrators to detect problems earlier. + # # allowed values: yes, no - require_message_authenticator = no + require_message_authenticator = yes # # If the home server does not respond to a request within -- 2.1.4