%{rand} in recent versions
    Arran Cudbard-Bell 
    a.cudbardb at freeradius.org
       
    Mon Jul 15 09:20:35 CEST 2013
    
    
  
On 15 Jul 2013, at 07:41, Stefan Winter <stefan.winter at restena.lu> wrote:
> Hi,
> 
> while I've been staring at debug output of 2.x.x I noticed that%{rand:x}
> doesn't seem to do what it should:
> 
> ++? if (true ) -> TRUE
> ++- entering if (true ) {...}
>        expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15
> 08:17:08
>        expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15
> 08:17:08
>        expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15
> 08:17:08
> 
> As you see, the expression %{rand:1000000} gets expanded into an empty
> string. In my particular case, this leads to a lot less entropy than I
> thought. The expansion is there three times alright, that's as per
> config, but I would have expected the results to be different.
> 
> Now that I knew where to look, I went back to 2.2.0 mainstream release
> code - and saw the same :-(
Works in 3.0.0, but yes, broken in v2.x.x HEAD. Odd seeing as the xlat code is very similar.
-Arran 
    
    
More information about the Freeradius-Devel
mailing list