Pair matching when attribute not present

[Alan DeKok]

Brian Candler wrote:
> I was expecting that the following rlm_sql authorize_check_query response
> would work if the attribute was not present:
> 
>     'Calling-Station-Id', '=~', '^$|^0845'

  It doesn't.  The "=~" operator can match only if the attribute exists.

> Another usage case:
> 
>     'Reply-Message', '!=', 'SPECIALOPTION'
> 
> (i.e. I would like this to match if either Reply-Message is not present, or
> if its value is not SPECIALOPTION)
> 
> It's a matter of discussion as to which is the desired behaviour, and is
> maybe something that could be considered for freeradius 3.x

  Changing the meaning of the operators is not an option.  It would
break thousands of existing installations.

  Alan DeKok.