Re: Problem with Vendor ID greater then 32767

Rafael Ugolini wrote:

I was trying to use VSA with my private enterprise number registered with IANA (as describe in the documentation) and I found a little problem. ... and my number is 34045, so I got a return -1.

Hmm... IANA is already past 32K. Ugh.

So, after this I was looking for more of this limitation with vendor id, and I found one more in rlm_eap_ttls.c,

I attached the patch to solve this problem.

There's a bit more to it than that. The vendor IDs are packed into a field that is an "int". Enabling vendor IDs of over 32K can result in negative numbers. The code needs to be audited for that, too. I'll take a look... Alan DeKok.