When using DOUBLE_QUOTED_STRING, passwords with '\"' may not work

g4-lisz at tonarchiv.ch g4-lisz at tonarchiv.ch
Wed Sep 13 16:30:56 UTC 2023


config:

ldap {
    ...
     password = "some\\\"word"
}

V3.2.x (from Git today):

Wed Sep 13 17:58:36 2023 : Debug: Loaded rlm_ldap, checking if it's valid
Wed Sep 13 17:58:36 2023 : Debug:   # Loaded module rlm_ldap
Wed Sep 13 17:58:36 2023 : Debug:   # Loading module "ldap" from file 
/opt/cpr_V3/etc/raddb/mods-enabled/ldap
Wed Sep 13 17:58:36 2023 : Debug:   ldap {
Wed Sep 13 17:58:36 2023 : Debug:       server = "localhost"
Wed Sep 13 17:58:36 2023 : Debug:       password = "some\\"word"
Wed Sep 13 17:58:36 2023 : Debug:    sasl {
Wed Sep 13 17:58:36 2023 : Debug:    }

master:

Wed Sep 13 18:27:41 2023: Debug : Loaded module rlm_ldap
Wed Sep 13 18:27:41 2023: Debug :     ldap {
Wed Sep 13 18:27:41 2023: Debug :       server = 'localhost'
Wed Sep 13 18:27:41 2023: Debug :       password = "some\\\\\\"word"
Wed Sep 13 18:27:41 2023: Debug :       sasl {
Wed Sep 13 18:27:41 2023: Debug :       }

On 13.09.23 17:28, g4-lisz at tonarchiv.ch wrote:
> September 13, 2023 4:06 PM, "Alan DeKok" <aland at deployingradius.com> wrote:
>
>> So either you're running a very old / buggy version, or something else is going on.
>>
> Freshly compiled from master. Now I get this:
>
> In module config: "some\\\"word" => output "some\\\\\\"word"
>
> Now I have to admit that I didn't test this with the ldap module. But this is the value that gets logged in radius.log for config string parameters when using backslashes inside double quotes.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list