default filter for username

Olivier Beytrison olivier at
Wed Dec 5 18:04:54 CET 2012


with the new policy.d/filter system and the default configuration, you
can't test the server with a dummy user inserted at the top of the users
file (as explained in the documentation).

the filter "must have at least 1 string-dot-string after @" makes it
impossible to test a dummy user without realm. and if you provide a
realm, the user is not found.

(User-Name !~ /@(.+)\\.(.+)$/) should be checked only if there is
actually a @ in the username.

your thoughts ?


 Olivier Beytrison
 Network & Security Engineer, HES-SO Fribourg
 Mobile: +41 (0)78 619 73 53
 Mail: olivier at

More information about the Freeradius-Devel mailing list