Hello, I want to delete an attribute I send to NASes in Access-reply, regardless of its value. Apparently I cannot use '!*' operator which is only for check items, and '-=' doesn't support wilcards (unless i mistaken) How can I do it? Am using freeradius 2.1.6 on Debian x86_64 P.S: of course I can't change the attributes returned in the authorized section. :)
Alexandre Chapellon wrote:
Hello,
I want to delete an attribute I send to NASes in Access-reply, regardless of its value. Apparently I cannot use '!*' operator which is only for check items, and '-=' doesn't support wilcards (unless i mistaken) How can I do it?
update reply { Foo-Bar -= "%{reply:Foo-Bar}" } Ugly, but it works. Alan DeKok.
Le mardi 31 août 2010 à 04:31 +0200, Alan DeKok a écrit :
Alexandre Chapellon wrote:
Hello,
I want to delete an attribute I send to NASes in Access-reply, regardless of its value. Apparently I cannot use '!*' operator which is only for check items, and '-=' doesn't support wilcards (unless i mistaken) How can I do it?
update reply { Foo-Bar -= "%{reply:Foo-Bar}" }
Why do you think it is ugly? Is it performance killer?
Ugly, but it works.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Aug 30, 2010, at 8:23 PM, Alexandre Chapellon wrote:
Le mardi 31 août 2010 à 04:31 +0200, Alan DeKok a écrit :
Alexandre Chapellon wrote:
Hello,
I want to delete an attribute I send to NASes in Access-reply, regardless of its value. Apparently I cannot use '!*' operator which is only for check items, and '-=' doesn't support wilcards (unless i mistaken) How can I do it?
update reply { Foo-Bar -= "%{reply:Foo-Bar}" }
Why do you think it is ugly? Is it performance killer?
Not really. It's just not very pretty, the server has to expand reply:Foo-Bar compare it to all the instances of Foo-Bar and remove those instances from the reply list. more Efficient to search for and remove attributes by their integer value. -Arran
participants (3)
-
Alan DeKok -
Alexandre Chapellon -
Arran Cudbard-Bell