RE: Modifying incoming packets with unlang

28 Mar 2022

      Thank you, I wouldn't have got that far in a very long time!

David le Roux

-----Original Message-----
From: Freeradius-Users <freeradius-users-bounces+david.leroux=miller.co.uk@lists.freeradius.org> On Behalf Of Matthew Newton
Sent: 28 March 2022 11:53
To: freeradius-users@lists.freeradius.org
Subject: Re: Modifying incoming packets with unlang

On 28/03/2022 10:49, David le Roux wrote:
...
I am migrating from an old raddb instance and one of the changes is that freeradius no longer uses the attr_rewrite module and instead relies on unlang.
...
attr_rewrite copyusertocertcn {
                 attribute = Cert-CN
                 new_attribute = yes
                 searchfor = ""
                 searchin = packet
                 replacewith = "%{User-Name}"
update request {
   &Cert-CN := &User-Name
}
...
attr_rewrite removehostportion {
                 attribute = Cert-CN
                 searchin = packet
                 searchfor = "(host/)(.*)"
                 replacewith = "%{2}"
                 ignore_case = no
                 new_attribute = no
         }
if (&Cert-CN =~ /^host\/(.*)$/) {
   update request {
     &Cert-CN := "%{1}"
   }
}

Or, possibly better all in one depending on your needs, something like

if (&User-Name =~ /^host\/(.*)$/) {
   update request {
     &Cert-CN := "%{1}"
   }
}

(which will leave Cert-CN unset if User-Name doesn't start with "host/")

--
Matthew
-
List info/subscribe/unsubscribe? See https://gbr01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7C1fa9c163c06a469c84ae08da10a93d8f%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637840616310423601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=S8VjW103iqu9RpU245YN0LLtlzmu0oGlRgY3E4SuASY%3D&reserved=0
________________________________

Miller Homes Limited Registered in Scotland - SC255429
2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH

Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment.

Miller Homes Limited <https://www.millerhomes.co.uk>