Thank you Alan and Paul for your replies.
> > Freeradius converts the attribute names to make them more like
> > standard "sh" variables. It also wraps the string values in double
> > quotes, such that echo ${USER_NAME} yields "username".>
> The first issue is a result of deciding that '-' is a magic
> character to many programs.
>
> The second issue is probably unnecessary, and should be resolved.
> See src/main/exec.c, change "vp_prints_value(..., 1)" to "..., 0)"
>
> You can also fix src/main/exec.c to NOT uppercase the attribute
> names. It should be pretty easy.
Uppercasing is actually the worst problem, as it's not easily reversible.
I have done workarounds in my client for all these, but the case fix did
not come out too pretty.
Since this is a production deal, my goal is to minimize hacks that might
cause things to break should someone else upgrade freeradius on the
servers, hence I'm not too keen on compiling my own version, especially
as it is now prepackaged on the newer Fedora releases.
> > Xtradius uses Auth-Type = External, freeradius appears to need
> > Auth-Type = Accept with an external script. Not a big deal, just
> > thought I should mention it because it is somewhat less intuitive
> > (since after all, you can turn it into a Reject via exit code).
>
> So add 'External' as a duplicate name for 'Accept' in the dictionaries.
It doesn't bother me all that much that it doesn't say External, now that
I got it to work. I only pointed it out because, by being non-obvious,
might become a stumbling block for others.
-- Regards, L.C. (Laurentiu Badea)
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
