Max length for User-Name
Pertaining to User-Name, RFC2865 states in section 5.1: 0 1 2 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- | Type | Length | String ... +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- Type 1 for User-Name. Length >= 3 String The String field is one or more octets. The NAS may limit the maximum length of the User-Name but the ability to handle at least 63 octets is recommended. which recommends 'at least' 63 octets, but I see the sql (ver 2.2.6 with postgresql) set the limits the UserName to 'at most' 64 characters: CREATE TABLE radcheck ( id SERIAL PRIMARY KEY, UserName VARCHAR(64) NOT NULL DEFAULT '', ... It seems to me the limiting factor of the User-Name here should only the 'length' field, which is one octet, therefore limiting the User-Name string to 255 charaters (minus overhead?). Why is the UserName in the table limited to 64 characters? What is the reasoning behind this? Is there some other limiting factor? I have a case where we need to use longer user names. Thanks, Joe
On 27 Jan 2017, at 15:26, Joe Friedeggs <friedeggs44@hotmail.com> wrote:
which recommends 'at least' 63 octets, but I see the sql (ver 2.2.6 with postgresql) set the limits the UserName to 'at most' 64 characters:
2.2 is EoL. 3.0.x uses the text type for username: CREATE TABLE radcheck ( id serial PRIMARY KEY, UserName text NOT NULL DEFAULT '', Attribute text NOT NULL DEFAULT '', op VARCHAR(2) NOT NULL DEFAULT '==', Value text NOT NULL DEFAULT '' );
What is the reasoning behind this?
Someone decided that '64' was a cooler looking number than '30' 12 years ago: https://github.com/FreeRADIUS/freeradius-server/commit/fa493402ac9e2d8d401b9... Regards, Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
On Jan 27, 2017, at 10:26 AM, Joe Friedeggs <friedeggs44@hotmail.com> wrote:
It seems to me the limiting factor of the User-Name here should only the 'length' field, which is one octet, therefore limiting the User-Name string to 255 charaters (minus overhead?). Why is the UserName in the table limited to 64 characters? What is the reasoning behind this? Is there some other limiting factor? I have a case where we need to use longer user names.
The configuration files and SQL schema are text. You can edit them. The limitation of 64 characters is there largely for databases which allocate a 64-byte entry for a user name, even if only 10 are used. If your database is smarter, change the column to be variable length. The rest of the server won't care. Alan DeKok.
Yeah, well, that's what comes in centos6, and the powers that be insist we stick to that. You've heard the story. Heck, we just recently got off of 1.1.7. I know, I know, it just makes everyone's life more difficult. Appreciate you input, though. On the plus side, 1.1.7 worked wonderfully for us for years, and I'm hoping for the same with 2.2.6. Joe ________________________________ From: Freeradius-Users <freeradius-users-bounces+friedeggs44=hotmail.com@lists.freeradius.org> on behalf of A.L.M.Buxey@lboro.ac.uk <A.L.M.Buxey@lboro.ac.uk> Sent: Friday, January 27, 2017 12:25 PM To: FreeRadius users mailing list Subject: Re: Max length for User-Name Hi,
which recommends 'at least' 63 octets, but I see the sql (ver 2.2.6 with postgresql) set the limits the UserName to 'at most' 64 characters:
2.2.6 ??? thats hideously outdated. its been updated and fixed since those days. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html FreeRADIUS -- users' list info<http://www.freeradius.org/list/users.html> www.freeradius.org Users' List Information. The freeradius-users mailing list is for users of the FreeRADIUS server not Cistron's server! There are a few house-rules to which we'd like ...
On Fri, Jan 27, 2017 at 08:53:39PM +0000, Joe Friedeggs wrote:
Yeah, well, that's what comes in centos6, and the powers that be insist we stick to that. You've heard the story.
Same story here I guess. CentOS provide the package; CentOS provide the support. Let us know how you get on :)
I know, I know, it just makes everyone's life more difficult.
But there's an easy fix for that :( Your management do know that version 2 is end-of-life and no longer supported, right?
On the plus side, 1.1.7 worked wonderfully for us for years, and I'm hoping for the same with 2.2.6.
Hopefully... Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Yeah, well, that's what comes in centos6, and the powers that be insist we stick to that. You've heard the story. Heck, we just recently got off of 1.1.7. I know, I know, it just makes everyone's life more difficult. Appreciate you input, though.
Would TPTB accept a second repository? Or *must* it be RHEL6/CentOS6 official repos? Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
participants (6)
-
A.L.M.Buxey＠lboro.ac.uk -
Adam Bishop -
Alan DeKok -
Joe Friedeggs -
Matthew Newton -
Stefan Paetow