LDAP distinguished name escaping

[Rob Johnson [rbj]]

Thanks for the pointer Arran,

For reference, I replaced:

base_dn = "%{reply:Tmp-String-0}"

with

base_dn = &reply:Tmp-String-0

in the ldap module and the string is no longer escaped!

Cheers, Rob

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+rbj=aber.ac.uk at lists.freeradius.org] On Behalf Of Arran Cudbard-Bell
Sent: 19 September 2016 10:32
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Re: LDAP distinguished name escaping


> On 19 Sep 2016, at 12:07, Rob Johnson [rbj] <rbj at aber.ac.uk> wrote:
> 
> Thanks Arran,
> 
> Have you any idea how this can be achieved in practice?
Yeah, just use an attribute reference i.e. &my-attribute, in place of the double quoted string in the config.

Only a small subset of config items work with it though.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org> FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2