cui-inner.post-auth and cui.post-auth

Alan DeKok aland at deployingradius.com
Wed Jan 29 16:21:49 CET 2014


Tomasz Wolniewicz wrote:
> We do not know if every defined namespace of Operator-Name is (or is
> going to be) case-insensitive. REALM definitely is (technically), but
> the implementation does not assume anything about the namespace.

  The realm namespace is a DNS name, and should be case insensitive.

  Forcing lowercase is arguably wrong for DNS, but... I think it's OK here.

> If the visited site cannot control what is sends in the Operator-Name
> then tough luck. CUI is of no value the the home site, so the only side
> affected by the problem is the side that causes the problem.
> 
> As I said, no harm can be expected from adding the lower case, but if it
> does not serve any purpose then why add it?

  Normalization is usually a good thing.

  Alan DeKok.


More information about the Freeradius-Users mailing list