Minimal Exec Example

Arran Cudbard-Bell a.cudbardb at freeradius.org
Sun Sep 24 02:46:00 CEST 2017


> On 23 Sep 2017, at 03:25, Peter Lambrechtsen <peter at crypt.nz> wrote:
> 
> Or if you really need some really special logic write it in Perl as there
> is a very stable module to do exactly that. The Python module is also there
> but can be more problematic if you have external dependencies and is less
> forgiving. The perl code I wrote gets called millions of times a day
> without an issue.

I wouldn't say one is more stable or forgiving than the other. From a developer's perspective, the C embedding APIs are both obtuse and seem to be written by people who resent the fact that people are embedding their beautiful languages and not using them in their pure form.

From a user's perspective there's some weirdness with global configuration in python (like python_path), which we plan to fix in v4...

Anyway:

update control {
        Auth-Type := `/usr/bin/php -f /foo/bar/baz.php --username '%{User-Name}' --password '%{User-Password}' --ip '%{Client-IP-Address}'`
    }
}

Is perfectly valid syntax.  Backtick expansion is supported by the server.

As Alan D says, any data written to stdout will be assigned to Auth-Type.

-Arran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20170924/afcd5e2a/attachment.sig>


More information about the Freeradius-Users mailing list