LDAP Accounting

Olivier Beytrison olivier at heliosnet.org
Wed Dec 12 07:41:11 CET 2012


On 11.12.2012 23:18, Arran Cudbard-Bell wrote:
> 
> On 11 Dec 2012, at 22:07, Arran Cudbard-Bell <a.cudbardb at freeradius.org> wrote:
> 
>>
>> On 11 Dec 2012, at 15:49, Brian Candler <B.Candler at pobox.com> wrote:
>>
>>> On Tue, Dec 11, 2012 at 12:40:05PM +0000, Arran Cudbard-Bell wrote:
>>>> Could you try 
>>>>
>>>> update {
>>>> 	<attribute> -= ANY
>>>> }
>>>>
>>>> Bare ANY keyword being magic.
>>>
>>> Aside: would it be more consistent to allow
>>>
>>> update {
>>> <attribute> !* "ANY"
>>> }
>>>
>>> where the RHS value is ignored? This is by analogy to unlang updates to AV
>>> pair lists.
>>
>> And no, I think it's good to have a consistent wildcard value.
> 
> Actually the code is slightly simpler without it. Ok changed to ignore right operand.

Why did you remove support of -= ? It is still useful if you have
fixed-multi-valued ldap attributes and you want to remove a specific one.

-- 

 Olivier Beytrison
 Network & Security Engineer, HES-SO Fribourg
 Mobile: +41 (0)78 619 73 53
 Mail: olivier at heliosnet.org


More information about the Freeradius-Devel mailing list