<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Santiago Balaguer García wrote:
<blockquote cite="mid:BAY143-W483281E9E8572D1ECBE930B0740@phx.gbl"
type="cite">
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style> Hi,<br>
<br>
I want the 'san0001' user has two passwords. There is in my radcheck
table:<br>
<br>
Username | Attribute | op | value<br>
------------------------------------<br>
san0001 Password ?? santi1<br>
san0001 Password ?? santi2<br>
<br>
Which op value have to use (=, :=, +=, ==) ?</blockquote>
<br>
Multiple valid passwords for a single user is a bad idea for a host of
reasons. On top of that the username field should be a unique primary
key disallowing duplicates enforced by the SQL database. I have no clue
what it means to query a username and get multiple rows back and I
suspect the internal code would be confused by this as well (note I
have not looked at the code in question, but I would suspect it would
do one of two things, use the first row returned or fail with an error
if multiple rows). The concept of iterating over multiple rows until a
password finally works is so dubious I would be most surprised if it
were coded this way (and if it was I'd consider it a bug and security
flaw).<br>
<br>
The short answer is don't do this and don't expect the server to work
this way.<br>
<br>
<pre class="moz-signature" cols="72">--
John Dennis <a class="moz-txt-link-rfc2396E" href="mailto:jdennis@redhat.com"><jdennis@redhat.com></a>
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>