[rad] RE: Free Radius users record samples for SmartEdge router subcriberauthentication.

Charles Gregory cgregory at hwcn.org
Wed Jun 17 16:28:46 CEST 2009


On Wed, 17 Jun 2009, A.L.M.Buxey at lboro.ac.uk wrote:
>>> abc            User-Password == "test"
> that is wrong. wrong and wrong

Okay, this isn't just my favorite quibbler jumping on me. So I have to 
ask, even if there is a 'better' syntax, or a 'preferred' way of doing 
things, why is this 'standard' old radius check item so 'wrong'?

I checked the docs, and it *appears* that checking an input attribute 
value against a hard-coded constant is still valid syntax. Though I notice 
that the example that both Elias and I quote is *gone* from the 1.1.7 docs 
(Elias, please check, I think you have man pages and/or documentation from 
a version of FR earlier than your 1.1.7! This really confuses things!).

So why is Input-Attribute == "value" now wrong?
Is it just wrong for the Passwords? Groups?
Or is '==' deprecated for all check items past a certain release?
If so, why is it still in the 'users' man page for 2.x?
I finally noticed that "Cleartext-Password" is not an input attribute, 
which suggests that there is something 'different' about the way we're 
now specifying input attribute checking in the users file. I don't doubt 
that it 'makes sense' according to some new way of doing things, but it 
looks like an amazing departure from 'classic' Livingston syntax....

If so, I'm *really* glad I didn't upgrade my live version. :-O

- Charles



More information about the Freeradius-Users mailing list