On Wed, 13 Mar 2002, Chris Parker wrote: > At 05:40 AM 3/13/2002 -0700, Charlie Watts wrote: > >On Tue, 12 Mar 2002, Chris Parker wrote: > > > > > At 06:20 PM 3/11/2002 -0700, Charlie Watts wrote: > > > >On Mon, 11 Mar 2002, Chris Parker wrote: > > > > > At 10:18 AM 3/11/2002 -0700, Charlie Watts wrote: > > > > > >I uncommented your DEBUG2 lines in rlm_attr_filter.c and re-compiled. > > > >Here's an example of what I see when using the := syntax: > > > > > > > >modcall: entering group authorize > > > > modcall[authorize]: module "preprocess" returns ok > > > > attr_filter: Matched entry realm.test at line 79 > > > > attr_filter: creating vp Service-Type - 1 - 2 > > > > attr_filter: creating vp Login-Service - 1 - 1 > > > > attr_filter: creating vp Ascend-Data-Filter - 4 - 0 > > > > attr_filter: creating vp Ascend-Data-Filter - 4 - 0 > > > > attr_filter: creating vp Ascend-Data-Filter - 4 - 0 > > > > attr_filter: creating vp Ascend-Data-Filter - 4 - 0 > > > > modcall[authorize]: module "attr_filter" returns updated > > > > > > That tells you that 'attr_filter' created 6 a/v pairs and added them > > > to the reply. They are all separate vp's at this point. > > > > > > > Ascend-Data-Filter = "ip input forward 0" > > > > Ascend-Data-Filter = "ip input forward 0" > > > > Ascend-Data-Filter = "ip output drop 0" > > > > Ascend-Data-Filter = "ip input forward 0" > > > >Finished request 0 > > > > > > Hmm, now that is a problem, as it shouldn't be setting 0. > > > >Is it really "setting 0" ? It is getting "ip input forward" and "ip input > >drop" before the 0 - so at least part of the strvalue is getting through. > >Right? > > Maybe. Need to see the binary data for the string, before it's passed > to the 'print_abinary()' function. Either the binary data is wrong, > or print_abinary() is doing something wrong.
I'm not sure where to keep looking here. This is over my head. I'm working at it, though. > > > If you aren't already, I'd upgrade to the latest CVS version, as there > > > has been some work done at some point in the handling of Data-Filters, > > > but I don't recall if that was before or after the 0.4 release. > > > >I'm using CVS. Wouldn't think to ask if I wasn't. :-) > > I'd just confirm that you are loading the latest libraries. I'm not > able to duplicate the problem here with. It *could* be a library mismatch. > The next step would be, as described above to get the raw binary data for > the attribute that's being passed to 'print_abinary()' to see if it's the > data that's bad or the function that's wrong. So it does work for you? With multiple Ascend-Data-Filter items? I so hate being "different". Hrm. :-/ I'm certain I've got the correct libraries. The only rlm_ files I have outside the source are in /usr/local/lib. If I remove them, the server doesn't work. It still doesn't work after a `make install`. And I tried on a machine that didn't have freeradius installed before. :-) I would appreciate any other suggestions. Thanks for your time so far. -- Charlie Watts [EMAIL PROTECTED] Frontier Internet, Inc. http://www.frontier.net/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
