rlm_digest module - how to return rows in authenticate part
Hi Because I've encountered some problems with OpenSer-Radius (described in http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg27755.h... ) I've started analysis of FreeRadius sources and I've discovered very strange thing. I've compared rlm_digest.c from ver.1.0.1 with 1.1.2 and it was appeared that part descibed as "rlm_digest: Converting Digest-Attributes to something sane..." was moved from digest_authorize function to digest_authenticate . It is almost not important but how to handle such situation when I want return few attribute to client but to set values in attributes I need to know what are values in few attributes from Request eg. from Digest-Method. In current version I cannot return rows with attributes because only one SQL query can be invoked after authotize part - postauth_query (defined in postgres.conf) but this query cannot return list of row it can only return one value. Can you write how to return attributes to client in my situation? P.S As I understand the 'something sane' means that e.g we convert values from Digest-Attributes to Digest-Method. Regards Michal Szymanski
biuro@globeinphotos.com wrote:
I've compared rlm_digest.c from ver.1.0.1 with 1.1.2 and it was appeared that part descibed as "rlm_digest: Converting Digest-Attributes to something sane..." was moved from digest_authorize function to digest_authenticate .
Yes. It can be moved back, if necessary.
It is almost not important but how to handle such situation when I want return few attribute to client but to set values in attributes I need to know what are values in few attributes from Request eg. from Digest-Method.
My suggestion would be to move the code to a common function, and then to call that function from both the authorize && authenticate functions in rlm_digest.c.
P.S As I understand the 'something sane' means that e.g we convert values from Digest-Attributes to Digest-Method.
Yes. Alan DeKok.
As I understand without source modification it is imposible to acces converted values. Am I right? Regards Michal Szymanski -----Original Message----- From: freeradius-devel-bounces+biuro=globeinphotos.com@lists.freeradius.org [mailto:freeradius-devel-bounces+biuro=globeinphotos.com@lists.freeradius.or g] On Behalf Of Alan DeKok Sent: Wednesday, July 12, 2006 11:42 PM To: FreeRadius developers mailing list Subject: Re: rlm_digest module - how to return rows in authenticate part biuro@globeinphotos.com wrote:
I've compared rlm_digest.c from ver.1.0.1 with 1.1.2 and it was appeared that part descibed as "rlm_digest: Converting Digest-Attributes to something sane..." was moved from digest_authorize function to digest_authenticate .
Yes. It can be moved back, if necessary.
It is almost not important but how to handle such situation when I want return few attribute to client but to set values in attributes I need to know what are values in few attributes from Request eg. from Digest-Method.
My suggestion would be to move the code to a common function, and then to call that function from both the authorize && authenticate functions in rlm_digest.c.
P.S As I understand the 'something sane' means that e.g we convert values from Digest-Attributes to Digest-Method.
Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.9.10/386 - Release Date: 2006-07-12 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.9.10/386 - Release Date: 2006-07-12
participants (3)
-
Alan DeKok -
biuro@globeinphotos.com -
GlobeInPhotos