On Thu, 15 Mar 2007 10:51:17 -0500 Alan DeKok 
>Sam Schultz wrote:
>> An entry like:
>> DEFAULT         Realm == "test", Autz-Type := sql-test
>>                 User-Name = "%{User-Name}"
>  Please read "man users" for the definition and meaning of 
>  You want:
>       User-Name := ...

Actually, the example above was a typo. The 'User-Name =' line was
'User-Name :=' during testing, which is the part that is confusing,
since the documentation states: 

   Attribute := Value
       Always matches as a check item, and replaces in the 
       items any attribute of the same name. If no attribute of that
       name appears in the request, then this attribute is added. 

       As a reply item, it has an identical meaning, but for the 
       items, instead of the request items.

According to this passage from the operators web page
(http://wiki.freeradius.org/Operators), I would expect the original
'[EMAIL PROTECTED]' entry to be replaced by '[EMAIL PROTECTED]', and not be
appended to the list like what is apparently happening.

>> Followed by Accounting-Requests that still contain the anonymous 
>> entry,
>> so it is still using the oldest (first?) User-Name attribute. Is 
>> there any way at all to REMOVE already set attributes so they 
>> re-sent to the NAS?
>  The documentation helps in these matters.

The documentation helps ONLY if the documentation is consistent with
the application's design, and ONLY if the NASes at the other end 
to the RADIUS standard. Of course, I would chalk this up to a 
mistake in 
my configuration before asserting the former. The output of fr's 
seems to rule out the latter.

>  Alan DeKok.
>  http://deployingradius.com       - The web site of the book
>  http://deployingradius.com/blog/ - The blog
>List info/subscribe/unsubscribe? See 

Click for free info on online masters degrees and make $150K/ year

List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to