doubts about the functions in the unlang

[Matthew Newton]

On Thu, Jun 11, 2015 at 10:40:14AM -0400, Arran Cudbard-Bell wrote:
> 
> > On Jun 11, 2015, at 10:25 AM, Matthew Newton <mcn4 at leicester.ac.uk> wrote:
> > 
> > On Thu, Jun 11, 2015 at 02:14:30PM +0000, Stefan Paetow wrote:
> >>> I know about that.... but in my case i have a lot of vsas, and I would not
> >>> want to have to create one for each.
> >> 
> >> Either that, or use Arran's version that calls xlat to translate the temporary strings. Your choice really. :-)
> > 
> > Or, e.g. use rlm_perl.
> 
> Or don't :(
> 
> Have you read the code in rlm_perl? ew.

I don't personally, which is why I suggested automating unlang
output. But it is another solution, even if not necessarily a good
one!

Making a call-out to another language like that always seems like
a bad idea to me, unless absolutely required - it "feels" like
it's going to be slow, whether it actually is or not. If I wanted
something unusual I'd be more inclined to just hack it up as a C
module.

Having said that, and noting Alan's comments that it's unlikely to
happen, having parameters to policies is something I've thought
would be useful for a while. Otherwise you tend to end up with an
ugly 'update Tmp-String-X' before/after the policy call just to get
around it.

But as much as I'd thought it would be useful, so far I don't
believe I've actually got any config where I would have used it...

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>