[rad] RE: Free Radius users record samples for SmartEdge router subcriberauthentication.
Charles Gregory
cgregory at hwcn.org
Wed Jun 17 16:28:46 CEST 2009
On Wed, 17 Jun 2009, A.L.M.Buxey at lboro.ac.uk wrote:
>>> abc User-Password == "test"
> that is wrong. wrong and wrong
Okay, this isn't just my favorite quibbler jumping on me. So I have to
ask, even if there is a 'better' syntax, or a 'preferred' way of doing
things, why is this 'standard' old radius check item so 'wrong'?
I checked the docs, and it *appears* that checking an input attribute
value against a hard-coded constant is still valid syntax. Though I notice
that the example that both Elias and I quote is *gone* from the 1.1.7 docs
(Elias, please check, I think you have man pages and/or documentation from
a version of FR earlier than your 1.1.7! This really confuses things!).
So why is Input-Attribute == "value" now wrong?
Is it just wrong for the Passwords? Groups?
Or is '==' deprecated for all check items past a certain release?
If so, why is it still in the 'users' man page for 2.x?
I finally noticed that "Cleartext-Password" is not an input attribute,
which suggests that there is something 'different' about the way we're
now specifying input attribute checking in the users file. I don't doubt
that it 'makes sense' according to some new way of doing things, but it
looks like an amazing departure from 'classic' Livingston syntax....
If so, I'm *really* glad I didn't upgrade my live version. :-O
- Charles
More information about the Freeradius-Users
mailing list