Gloria Gabellini <[EMAIL PROTECTED]> wrote:
> with the last CVS (but also with previous CVS) the connectinfo_stop is 
> modified, in particular some characters like '+', '(', and ')' are 
> translated in the exadecimal notation. a string like this:
> 
> 24000/31200 V34+/LAPM (52000/28800)
> 
> is modified in:
> 
> 24000/31200 V34=2B/LAPM =2852000/28800=29

  What you DON'T say is that you're trying to store this attribute in
an SQL database.

> Has someone the same problem? If yes, how can I solve it?

  It's a design intent of the server.  If that translation is NOT
done, then certain characters can get the SQL parser
excited... e.g. Someone logs in with a User-Name consisting of SQL
commands, and your SQL database is trashed.

> Now I can't run the server in debug mode and discover witch module does the 
> modification. Tomorrow I think I can setup a test environment.

  It's the SQL, and ONLY the SQL module which does this.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to