On Jul 13, 2022, at 1:24 PM, Dave Macias <davama@gmail.com> wrote:
Im attempting to move from FR v3.0.20 (rpm) to v3.2.0 (docker)
Noticing some interesting behavior, mostly with regex and huntgroups
This no longer works in huntgroups
router NAS-Identifier =~ "[[:alnum:]]+-[[:alnum:]]+-[[:alnum:]]+-(?i)rtr-[[:alnum:]]+"
So far as I know, nothing related to that has changed from 3.0.x to 3.2. Did you change which regular expression libraries the systems are using?
If i just do
DEFAULT Ldap-Group == 'router-manager' DEFAULT Ldap-Group == 'switch-manager'
then if a user is part of both ldap groups, then it will always match the first DEFAULT and not the second.
Yes... see the "Fall-Through" attribute. There's examples in mods-config/files/authorize. The same system works here. Alan DeKok.