Alexander Clouter wrote:
Okay, maybe my regex is bad...so I tested it: ---- alex@berk:~$ cat moo xwFMNc02QnAbZlQ9wI9tiG@GlobalSignRootCA.test xwFMNc02QnAbZlQ9wI9tiG@GlobalSign Root CA wobble@example.com wibble@example.co.uk
alex@berk:~$ grep '[[:graph:]]*@\([-[:alnum:]]\+\.\)\+[[:alpha:]]\{2,\}' moo xwFMNc02QnAbZlQ9wI9tiG@GlobalSignRootCA.test wobble@example.com wibble@example.co.uk ----
Any ideas? Bug? Feature?
FreeRADIUS uses the system regex libraries. grep might be using its own regex implementation. Specifically, I'm not sure [[:alpha:]] and friends are supported by the system regex library. I would suggest writing the rules to sanitize realms in layers: - reject requests containing malformed User-Names (spaces, etc.) - proxy *known* realms to another virtual server to handle them - proxy *other* realms to eduroam. Eduroam should really be creating a routing protocol for RADIUS. I don't think it would be hard: git + ssh + text files. See Section 2.7 of: http://tools.ietf.org/id/draft-dekok-radext-nai-00.txt Alan DeKok.