[Attrs Regex]
Thomas Fagart
tfagart at brozs.net
Tue May 12 02:43:17 CEST 2015
Hello,
We were sucessfuly using regexp on keys in attr_filter module with FR
2.1.6 FreeBSD 8.0
Something like that in attrs file :
"~\^\(.+\)\\.telco$"
Framed-IP-Address =* ANY,
Framed-IP-Netmask =* ANY,
Framed-MTU =* ANY,
Service-Type =* ANY,
Framed-Protocol =* ANY,
ERX-Virtual-Router-Name := "test",
Tunnel-Type:0 =* ANY,
Tunnel-Preference:0 =* ANY,
Tunnel-Medium-Type:0 =* ANY,
Tunnel-Client-Endpoint:0 =* ANY,
Tunnel-Server-Endpoint:0 =* ANY,
Tunnel-Assignment-Id:0 =* ANY,
Tunnel-Client-Auth-Id:0 =* ANY,
Tunnel-Server-Auth-Id:0 =* ANY,
Class =* ANY
After upgrading to FR 2.2.6 Freebsd 10.0, I've got the feeling that this
regular expression on realm attribute does not work anymore. I've also
noticed that the same regular expression still work in proxy.conf.
Tue May 12 02:07:30 2015 : Debug: [suffix] Looking up realm "toto.telco"
for User-Name = "test at toto.telco"
Tue May 12 02:07:30 2015 : Debug: [suffix] Found realm "~^(.+)\.telco$"
Tue May 12 02:07:30 2015 : Debug: [suffix] Adding Realm = "toto.telco"
Tue May 12 02:07:30 2015 : Debug: [suffix] Proxying request from user
test to realm ~^(.+)\.telco$
Tue May 12 02:07:30 2015 : Debug: [suffix] Preparing to proxy
authentication request to realm "~^(.+)\.telco$"
...
Tue May 12 02:07:30 2015 : Debug: +group post-proxy {
Tue May 12 02:07:30 2015 : Debug: [attr_filter.post-proxy] expand:
%{Realm} -> toto.telco
Tue May 12 02:07:30 2015 : Debug: ++[attr_filter.post-proxy] = noop
Tue May 12 02:07:30 2015 : Debug: +} # group post-proxy = noop
After spending some time on the mailing list and the doc, I've got
different ideas to solve that :
1. The new FR might not have been compile properly with pcre lib (as
this was a package) (radiusd -Xv does not tell me wether this is the
case or not)
2. The way regex work have change and I should fine the proper one
3. FR 3.x.x has been rewriten and should work better
4. Do not use rlm_attrs_filter and do something else (unlang ?)
Could you advise ?
Many thanks
Thomas
More information about the Freeradius-Users
mailing list