Generating timing stats for ntlm_auth

Alan DeKok aland at freeradius.org
Wed Oct 16 16:42:57 CEST 2013


Phil Mayers wrote:
> Shrug. I would argue there should be a separate paircmp for the highest
> prio code, and the if() left alone, but now that you have released 3.0
> in that mode I don't expect I will get my way.

  I'll have to think about it before changing the behavior.

  The issue is that the old code had a series of bugs which were
increasingly hard to fix.  The last one was essentially impossible, as
the code had devolved into nonsense.

  The re-write makes the code work the way it's documented to work.
There were a few bugs, but they were easy to fix.

> Also - the magic paircmp virtual attribute stuff is just a pain in the
> ass. They never behave quite right - Foreach-Variable is full of
> surprises (like being an invalid lhs for regexp unless quoted, but
> failing silently).

  That can, and should be fixed.

> So if you must do this, please make it a *short to
> type* and *real* control: attribute - control:RC perhaps?

  I'll take a look.

  Alan DeKok.


More information about the Freeradius-Users mailing list