Password == "bla%1" (shooting into my foot)

Alan DeKok aland at ox.org
Thu Jul 14 17:40:41 CEST 2005


Stefan Nehlsen <sn at parlanet.de> wrote:
> It took some time until I figured out that my password contained a % and
> the daemon tried some variable substitution.
> 
> don't do this!
> 
> How do I escape special chars in the users file and what characters are
> special?

  Use '\'.  And for variable substitution, the only real magic
character is %.  If you put quotes into a password, you'll have to
escape it, too.  But the rest of the characters that are usually magic
shell characters should be OK.

  Alan DeKok.




More information about the Freeradius-Users mailing list