Operator to remove attributes

Gary T. Giesen ggiesen+freeradius-users at giesen.me
Thu Oct 1 20:24:15 CEST 2015


According to the docs:

http://wiki.freeradius.org/config/Operators

That is not allowed as a reply item.


> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-
> bounces+ggiesen+freeradius-users=giesen.me at lists.freeradius.org] On
> Behalf Of Jorge Pereira
> Sent: October 1, 2015 2:19 PM
> To: FreeRadius users mailing list
> Subject: Re: Operator to remove attributes
> 
> Hi Gary,
> 
>     try something like:
> 
> Attribute !* ANY
> 
> 
> --
> Jorge Pereira
> 
> On Thu, Oct 1, 2015 at 3:13 PM, Gary T. Giesen <
> ggiesen+freeradius-users at giesen.me> wrote:
> 
> > I'm currently using FreeRADIUS 2.1.12 with an SQL backend and a
> > custom-developed front end.
> >
> > I've run into a situation where we need to be able to apply a group to
> > the user (that contains a check attribute) that would strip reply
> > items (basically we want to strip Service-Type, Framed-Protocol,
> > Framed-IP-Address, Framed-IP-Netmask, Framed-Route, etc) depending
> on
> > which device the request is coming from.
> >
> > I realize that using unlang is probably the best supported method for
> > this, unfortunately it doesn't jive well with our setup. I noticed a
> > while back that Joe Maimon wrote some patches to create some custom
> > operators to do just that:
> >
> >
> > http://lists.freeradius.org/pipermail/freeradius-devel/2005-October/00
> > 0550.h
> > tml
> >
> > "Attribute -= Value"
> > As a reply item it means remove matching items from the reply list.
> > Not allowed as a check item.
> >
> > "Attribute -* Value"
> > As a reply item it means remove all "Attribute" attributes items from
> > the reply list.
> > Not allowed as a check item.
> >
> > "Attribute -~ Value"
> > As a reply item it means remove regex matching items from the reply list.
> > Not allowed as a check item.
> >
> > Since it's not in the documentation, I presume this never made it into
> > an official release.  Were there problems with the patch? I'd be very
> > interested to see this implemented...
> >
> > Cheers,
> >
> > Gary T. Giesen
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list