On 30 Mar 2015, at 12:25, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 30 Mar 2015, at 12:10, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
So in theory if it appears as an X509 extension, and as Alan B said, you've created the appropriate RADIUS attribute, it'll automatically be decoded and placed in that attribute.
thought so :-)
I'll modify it so it prints about a bit more info, like attributes that would have been defined had the appropriate RADIUS attribute been present. That should help you a bit.
that would be useful....but maybe only with a particular setting/flag?
Maybe RDEBUG3 so it doesn't appear with -X
OK, added that, run with -Xx and you should see attributes that were skipped vp = pairmake(talloc_ctx, certs, attribute, value, T_OP_ADD); if (!vp) { RDEBUG3("Skipping %s += '%s'. Define %s in the server dictionary " "if you require this attribute", attribute, value, attribute); } else { rdebug_pair_list(L_DBG_LVL_2, request, vp, NULL); } -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2