Fall-Through attribute, reply or configure item?
I'm reading the documentation of freeradius 2.1.3 (I've not gone through it all yet) and I find that "Fall-Through = Yes" is always specified as a reply attribute. But it isn't a real reply attribute isn't it? It's more of a configure attribute like Cleartext-Password, right? So it should be used in a check line with := (or radcheck DB table). I understand that changing this will probably mean to much work for FR administrators, I'm only asking to make things clearer to me. ps. is there a list of the special configure attributes that freeradius works with? -- damjan | дамјан This is my jabber ID --> damjan@bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)
I'm reading the documentation of freeradius 2.1.3 (I've not gone through it all yet) and I find that "Fall-Through = Yes" is always specified as a reply attribute.
But it isn't a real reply attribute isn't it? It's more of a configure attribute like Cleartext-Password, right? So it should be used in a check line with := (or radcheck DB table).
I understand that changing this will probably mean to much work for FR administrators, I'm only asking to make things clearer to me.
ps. is there a list of the special configure attributes that freeradius works with?
All the answers are in the freeradius.internal dictionary. Ivan Kalik Kalik Informatika ISP
Damjan wrote:
I'm reading the documentation of freeradius 2.1.3 (I've not gone through it all yet) and I find that "Fall-Through = Yes" is always specified as a reply attribute.
Yes.
But it isn't a real reply attribute isn't it? It's more of a configure attribute like Cleartext-Password, right? So it should be used in a check line with := (or radcheck DB table).
Theoretically, yes. Practically, no. There are 100,000 deployments on the server using the existing functionality of Fall-Through, along with lots of documentation. Changing it for the sake of "purity" is a waste of time. Alan DeKok.
But it isn't a real reply attribute isn't it? It's more of a configure attribute like Cleartext-Password, right? So it should be used in a check line with := (or radcheck DB table).
Theoretically, yes. Practically, no.
There are 100,000 deployments on the server using the existing functionality of Fall-Through, along with lots of documentation. Changing it for the sake of "purity" is a waste of time.
Of course, I understand that. I will be explaining Freeradius to some coworkers, including why we have to use Cleartext-Password and about the := operator in check lines, and somehow I came to Fall-Through that seemed like a configuration item. I had to know exactly what's going on, so I can prepare better. thanks. -- damjan | дамјан This is my jabber ID --> damjan@bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)
participants (3)
-
Alan DeKok -
Damjan -
tnt＠kalik.net