regex matching can be convinced to be TRUE if you're insistive enough?
Alan DeKok
aland at deployingradius.com
Thu May 26 14:17:35 CEST 2011
Stefan Winter wrote:
> right, the false positive matches for the regex are now gone, thanks!
That's good to hear.
> However, looks like the regex comparison stops after 1023 Bytes, if I
> actually put a matching pattern beyond that mark, the result keeps being
> FALSE.
>
> Any chance to allow for a longer string?
$ git pull
It's a simple fix.
> The concrete use case I have is that group membership attributes are
> pulled via ldap.attrmap, and if a user is in many groups, checking the
> group membership with [*] and a regex can easily go beyond 1023 Bytes.
A better fix would be to be able to do loop over attributes, doing
checks for each one. But that's getting into the area of a real
programming language...
Alan DeKok.
More information about the Freeradius-Devel
mailing list