Operator to remove attributes

Arran Cudbard-Bell a.cudbardb at freeradius.org
Thu Oct 1 21:09:21 CEST 2015


> On Oct 1, 2015, at 2:48 PM, Gary T. Giesen <ggiesen+freeradius-users at giesen.me> wrote:
> 
> Doesn't seem to work:
> 
> mysql> select * from radgroupreply WHERE groupname LIKE "DEVICE-MGMT-LNS";
> +-----+-----------------+-------------------+----+--------------------------
> -------------+
> | id  | groupname       | attribute         | op | value
> |
> +-----+-----------------+-------------------+----+--------------------------
> -------------+
> | 229 | DEVICE-MGMT-LNS | Framed-IP-Address | !* | ANY
> |
> | 230 | DEVICE-MGMT-LNS | Framed-IP-Netmask | !* | ANY
> |
> | 231 | DEVICE-MGMT-LNS | Cisco-AVPair      | += | vpdn:tunnel-type=l2tp
> |
> | 232 | DEVICE-MGMT-LNS | Cisco-AVPair      | += | vpdn:tunnel-id=dev-mgmt
> |
> | 235 | DEVICE-MGMT-LNS | Cisco-AVPair      | += |
> vpdn:tunnel-password=XXXXXXXXXX       |
> | 238 | DEVICE-MGMT-LNS | Cisco-AVPair      | += | vpdn:vpn-vrf=XXXXXXXX
> |
> | 239 | DEVICE-MGMT-LNS | Cisco-AVPair      | += |
> vpdn:ip-addresses=XXXXXXXXXXX         |
> +-----+-----------------+-------------------+----+--------------------------
> -------------+
> 
> lns#test aaa group PPPOE-RADIUS-SERVERS test_mgmt_account TestAccount
> new-code
> User successfully authenticated
> 
> USER ATTRIBUTES
> 
> addr                 0   10.55.0.100
> netmask              0   255.255.255.255
> addr                 0   0.0.0.0
> netmask              0   0.0.0.0
> tunnel-type          0   3 [l2tp]
> tunnel-id            0   "dev-mgmt"
> tunnel-password      0   <hidden>
> vpn-vrf              0   "XXXXXXXX"
> ip-addresses         0   "XXXXXXXXXXX"
> 
> It looks like it just adds a second set of attributes with values of
> 0.0.0.0.

Ah, SQL uses the old files API too, so it too, unfortunately has the same behaviour.

You'll have to do this in the policy language outside of SQL.

We'll fix this for v3.2.0 (the stable release of v3.1.)

-Arran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20151001/d29b470d/attachment.sig>


More information about the Freeradius-Users mailing list