Chris Parker wrote:
However... as part of the changes, I think I've got to clean up the handling of realms. With a bit more work, I think I can make the old-style "realms" configurations map to the new method when the server starts up.
That would be good. :)
Yeah... but it's work. I'd rather not do it. It's probably a good idea, though.
Hmm, the reason it's in the module/instance config now is that it made more sense to me to define the 'delimiter' as that's easier/faster to search for. If you define the delimiter in the realm/proxy.conf section, how does the realm search logic work?
Top to bottom in proxy.conf? But yes, you have a point.
I could see a realm option added to define what type of realm each should be.
IE, you could then have a separate config for a prefix and suffix realm of the same name ( as much as that might be confusing ). It could also reduce the scope of the number of realms that have to searched for a match.
Sure. I don't know that it's critical, though. People have lived without it for long enough that it's probably not a high priority. The other thing is how to fix the "ignore_null" and "ignore_default" handling. The code is pretty horrid right now, and I'd rather delete it than maintain backwards compatibility. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog