On Mon 27 Aug 2007, Arran Cudbard-Bell wrote: > Alan DeKok wrote: > > Norbert Wegener wrote: > >> That's true, but maybe Alan's suggestion to add a debug message > >> complaining about this > >> would be nice here, too? > > > > Committed to CVS. > > Does it complain and die , or just complain ? > > This is the kind of issue that I can see someone phoning me at 2am for > *sigh* ... > > Oh fun... the four fields that make up the ip address haven't got a > unique index across them... > > and the person who wrote our management application allows 0.0.0.0 as an > ip address... > > --- > > I know you like to kill the server off if theres any kind of > configuration parsing error; but possibly duplicate/invalid clients is > one of the exceptions where it might be better to complain bitterly... > > Or better still complain normally, and complain and exit in debugging > mode.
How do we currently handle overlapping subnets, and more specifically a single share secret for a subnet with specific shared secrets for IPs in that subnet? (IMHO a valid config but something I am not sure we support at present) Regards -- Peter Nixon http://peternixon.net/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

