Pair matching when attribute not present

Alan DeKok aland at
Thu Aug 18 14:44:56 CEST 2011

Brian Candler wrote:
> I was expecting that the following rlm_sql authorize_check_query response
> would work if the attribute was not present:
>     'Calling-Station-Id', '=~', '^$|^0845'

  It doesn't.  The "=~" operator can match only if the attribute exists.

> Another usage case:
>     'Reply-Message', '!=', 'SPECIALOPTION'
> (i.e. I would like this to match if either Reply-Message is not present, or
> if its value is not SPECIALOPTION)
> It's a matter of discussion as to which is the desired behaviour, and is
> maybe something that could be considered for freeradius 3.x

  Changing the meaning of the operators is not an option.  It would
break thousands of existing installations.

  Alan DeKok.

More information about the Freeradius-Devel mailing list