Version 3.0.10 has been released

[Sebastian Hagedorn]

--On 7. Oktober 2015 13:34:29 +0200 Herwin Weststrate 
<herwin at quarantainenet.nl> wrote:

> On 07-10-15 13:14, Sebastian Hagedorn wrote:
>> Hi,
>>
>> thanks for the update. I'm currently changing our configuration to adapt
>> to the changes in the update - mostly some small syntactic issues where
>> we apparently were still using deprecated forms. But there is one part
>> I'm not sure about. mods-config/attr_filter/access_reject has these two
>> new lines:
>>
>>       FreeRADIUS-Response-Delay =* ANY,
>>       FreeRADIUS-Response-Delay-USec =* ANY
>>
>> When I start radiusd, the following gets logged:
>>
>> Oct  7 13:01:44 xxx.rrz.uni-koeln.de radiusd[10038]:
>> [/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item
>> "FreeRADIUS-Response-Delay"     found in filter list for realm "DEFAULT".
>> Oct  7 13:01:44 xxx.rrz.uni-koeln.de radiusd[10038]:
>> [/etc/raddb/mods-config/attr_filter/access_reject]:11 Check item
>> "FreeRADIUS-Response-Delay-USec"     found in filter list for realm
>> "DEFAULT".
>>
>> I'm not sure if that is just cosmetic or something I should worry about?
>
> Short version: that warning is harmless. If you want to get rid of it,
> just remove the two lines from attr_filter/access_reject, there will be
> no behaviour changes.
>
> Longer version: The check you're seeing tries to warn us that we allow
> an attribute in the reply-list that we cannot send in an Access-Reject.
> The functionality has been added in PR #1216 to allow packet specific
> overrides of the reject_delay, so in this case we're not adding the
> attribute to send it to the client, but we're adding it to change
> something inside FreeRADIUS.
>
> I guess there are two simple options to remove this warning:
> - Set those attributes in another list than reply
> - Remove the warning from rlm_attr_filter
>
> From
> https://github.com/FreeRADIUS/freeradius-server/pull/1216#issuecomment-13
> 8924345 it looks like option 2 would be the better idea, as a preparation
> to making things more consistent.

Thanks for the fast reply. Now that I know the messages are harmless, I 
will just ignore them.
-- 
    .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:.
                 .:.Regionales Rechenzentrum (RRZK).:.
   .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20151007/8f5e2155/attachment.sig>