From a631ffefe39bab66f7960f485535ad0d19a6e5da Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Thu, 31 Mar 2011 18:55:25 +1100
Subject: [PATCH] If RADIUS returns a present but empty PW_USER_NAME, treat as
 anonymous.

---
 accept_sec_context.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/accept_sec_context.c b/accept_sec_context.c
index afbfb3f..a0421ea 100644
--- a/accept_sec_context.c
+++ b/accept_sec_context.c
@@ -72,7 +72,7 @@ acceptReadyEap(OM_uint32 *minor, gss_ctx_id_t ctx, gss_cred_id_t cred)
 
     major = gssEapRadiusGetRawAvp(minor, ctx->acceptorCtx.vps,
                                   PW_USER_NAME, 0, &vp);
-    if (major == GSS_S_COMPLETE) {
+    if (major == GSS_S_COMPLETE && vp->length) {
         nameBuf.length = vp->length;
         nameBuf.value = vp->vp_strvalue;
     } else {
-- 
2.1.4