xlat expansion of absent VPs
Alan DeKok
aland at deployingradius.com
Mon Jun 17 20:19:02 CEST 2013
Arran Cudbard-Bell wrote:
> I have to agree. If an attribute doesn't exist then it should expand to "",
> that's the behaviour i'm used to too.
For me, it's a major security issue. Silently missing an attribute is
bad.
> Previously the xlat code wrongly treated zero length expansions as errors,
> this might of been the original reason for returning a one char expansion.
No, the zero-length expansion issue was a temporary problem during the
re-write of the new code.
Alan DeKok.
More information about the Freeradius-Devel
mailing list