regex matching can be convinced to be TRUE if you're insistive enough?

Alan DeKok aland at deployingradius.com
Thu May 26 14:17:35 CEST 2011


Stefan Winter wrote:
> right, the false positive matches for the regex are now gone, thanks!

  That's good to hear.

> However, looks like the regex comparison stops after 1023 Bytes, if I
> actually put a matching pattern beyond that mark, the result keeps being
> FALSE.
> 
> Any chance to allow for a longer string?

$ git pull

  It's a simple fix.

> The concrete use case I have is that group membership attributes are
> pulled via ldap.attrmap, and if a user is in many groups, checking the
> group membership with [*] and a regex can easily go beyond 1023 Bytes.

  A better fix would be to be able to do loop over attributes, doing
checks for each one.  But that's getting into the area of a real
programming language...

  Alan DeKok.



More information about the Freeradius-Devel mailing list