addition to policy.conf

[Arran Cudbard-Bell]

>> However I won't argue with you guys who have operational experience of
>> eduroam.  If you say pre-validation is a good idea then it is.
>> 
>> In that case though, I would be inclined to write a validation regexp which
>> fully matches the ABNF in RFC 2486.
> 
> IIRC that's actually very difficult, maybe impossible, with classic regexps. Maybe it's possible with the PCRE path I added a while back, but I'm not sure.

It's impossible with classic regexps, it's possible with PCRE - I wrote one many years ago. I did it for the deploying eduroam at sussex docs, but then junked the compliant regexp when I figured out FreeRADIUS didn't support PCRE.

IIRC you need atomic look around for some stuff.

-Arran