"John Gruber" <[EMAIL PROTECTED]> wrote:
> Is that prophesy or cynicism?    Not that you're wrong... we'd ask for
> that.<g>

  It's a strong opinion.

  Writing one RADIUS server is hard enough.  Writing a RADIUS server
with multiple personalities is even harder.

  If people want to return different attributes based on the NAS, then
they can do that now.  But allowing two *completely* different
configurations inside of the RADIUS server makes misconfiguration and
security leaks *much* more likely.

  For similar reasons, I'm opposed to adding a PHP module to the
server.  PHP is nice, but it has an *atrocious* security record.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to