Exec-Program-Wait not working

[Gianni Costanzi]

On Wed, Jun 19, 2019 at 10:24 PM Gianni Costanzi <gianni.costanzi at gmail.com>
wrote:

> Il giorno mer 19 giu 2019 alle 22:13 Alan DeKok <aland at deployingradius.com>
> ha scritto:
>
>> On Jun 19, 2019, at 4:00 PM, Gianni Costanzi <gianni.costanzi at gmail.com>
>> wrote:
>> > Let’s keep it simple: I can’t invoke the program for every user that is
>> > found in users file, but only for some users, and the syntax I was using
>> > with Exec-Program-Wait was perfectly well suited for our purpose.
>>
>>   You've said that lots.  Why repeat yourself?
>>
>> > So it’s
>> > perfectly fine to reject the user before proxying it as you suggested,
>> but
>> > then I still need to invoke the external program only for some selected
>> > users.
>>
>>   You've already said that.  I already gave you suggestions for how else
>> to do it.
>>
>>   Your response was essentially "not going to do that.  Not going to try
>> to understand how to do it".
>>
>> > To avoid you being so acid
>>
>>   You are entirely too sensitive.  I gave you technical answers to
>> technical questions.  I pointed out how you were essentially lying to us
>> about the problem you're trying to solve.  I suggested that better
>> behaviour on your part would be productive.
>>
>>   Instead of learning, you reply by whining about how mean I am.  That is
>> completely unprofessional and childish.  Stop it.
>>
>> > (I don’t really understand why, I was quite
>> > polite I think),
>>
>>   Superficially polite, but also refusing to follow advice.  Which is
>> rude.
>>
>> > you’ve told me how to call Exec-Program-Wait, with := and
>> > on the first line as a check item. I’ve told you that it is not invoked
>> > even when I do that. Can you explain me why?
>>
>>   <shrug>  You're probably using an old version, or something else is
>> happening.
>>
>> > Where should I check if there is an error?
>>
>>   It's Open Source.  You have to source.  Track it down, and supply a
>> patch to fix the bug.
>>
>> > Is there some different requirement compared to previous
>> > versions of freeradius server? I think you can answer me even without
>> > further details on this point.
>>
>>   I've already answered that.  Read my messages.
>>
>> > We’re in an open source community where everyone should help the others
>> if
>> > the others are polite and correct.
>>
>>   AND FOLLOW INSTRUCTIONS.  AND READ THE DOCUMENTATION.
>>
>>   When you say "nah, I'm not going to do that", it's rude.  Which isn't
>> polite.
>>
>> > I think I’ve been both, so I don’t
>> > really understand why you answered in such a bad way.
>>
>>   I can't explain your failure to understand.  I've explained myself
>> repeatedly.  My "bad way" of answering is honest frustration at *you*, who
>> is making it as difficult as possible for me to help you.
>>
>>   This is Open Source.  You're not paying for support.  Don't complain
>> about the answers you get for free.
>>
>>   If it's a bug, you have access to the source.  Track it down and fix
>> it.  If you're not willing to do that, then the "community" aspect you
>> talked about is bullshit.  For you, there is no community.  Only others
>> helping you for free, while you refuse to do anything yourself.
>>
>>   I've seen this attitude a lot over the past 20+ years in the open
>> source community.  The people complaining the loudest about others are the
>> ones who (a) refuse to follow instructions, and (b) refuse to contribute.
>>
>>   I'll make it simple: follow instructions, read the docs, and you will
>> be able to fix the problem.  Keep complaining about how mean we are for
>> helping you, and you will be banned from the list.
>>
>>   Alan DeKok.
>>
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>
>
> Some answers:
> - I will go through the docs and the help about exec module and other
> things you’ve suggested, I’m not one that don’t follows your advices, I’ve
> said that without any reason
> - I’ve asked about hints about why exec-program-wait does not work and the
> only answer is probably is a bug related to an old version, I just hoped
> you gave me some hints about further points to check. I don’t know if
> you’ve ever worked in a Gdpr/pci-Dss/etc compliant company, ve are using
> the latest version available on our red hat enterprise servers, we can not
> instal the latest development release
> - I’m not childish, maybe you are, looking at your answers
> - you keep asking me while I repeat myself, I did it simply because the
> workaround you’ve suggested me simply to not implement the authentication
> flow I’ve explained
> - have you ever have a look at the other open source communities? About
> how experts help and answer to problems?
>
> Have a nice day/night
>    Gianni
>
>> <http://www.freeradius.org/list/users.html>
>
>
>
Alan, you don't have a gun pointed to your head, if you don't have time to
explain in detail or you don't have the will to explain something, just
don't answer. If you suggest
me to implement things that do not really implement the behavior I've
described you, expect me to ask you again. How can you reply "maybe you're
not running the latest
version, if it is a bug check the source code".. I'm not running Freeradius
1, I'm not on a years-old Freeradius version.
You almost always suggest to have a look at the documentation within the
configuration files, and it is something I almost always do before asking
you something, because
I know how you answer 90% of the time, but that documentation is clear for
someone like you that already knows how it works. This is why there is an
ML, to help people
like me understand how to implement something or solve some problems that
we can't solve by looking at the "not-so-clear" documentation.

You quite simplistically said that I don't follow your advice etc, which is
definitely not true. I will dig in the modules' docs and re-read your
answers tomorrow. I just hoped
you could give me an hint about how to check why Exec-Program-Wait was not
working, because it was the simplest way of implementing what I needed and
it worked
like a charm on previous versions. I'm not saying that I don't want to
change it at all because I want to stick to the old configuration, I'm just
trying to understand if there
is something I can do to understand why it does not work on my
configuration, before spending hours in understanding how exec or other
modules work and if they can
help me fulfill my requirements.

Best regards,
   Gianni Costanzi