OpenBSD wuth RADIUS authorization module unauthorized access

Response authenticator is not checked, it allows to spoof response from RADIUS server...