On Wed, 17 Jun 2009, [email protected] wrote:
abc User-Password == "test"
that is wrong. wrong and wrong
Okay, this isn't just my favorite quibbler jumping on me. So I have to
ask, even if there is a 'better' syntax, or a 'preferred' way of doing
things, why is this 'standard' old radius check item so 'wrong'?
I checked the docs, and it *appears* that checking an input attribute
value against a hard-coded constant is still valid syntax. Though I notice
that the example that both Elias and I quote is *gone* from the 1.1.7 docs
(Elias, please check, I think you have man pages and/or documentation from
a version of FR earlier than your 1.1.7! This really confuses things!).
So why is Input-Attribute == "value" now wrong?
Is it just wrong for the Passwords? Groups?
Or is '==' deprecated for all check items past a certain release?
If so, why is it still in the 'users' man page for 2.x?
I finally noticed that "Cleartext-Password" is not an input attribute,
which suggests that there is something 'different' about the way we're
now specifying input attribute checking in the users file. I don't doubt
that it 'makes sense' according to some new way of doing things, but it
looks like an amazing departure from 'classic' Livingston syntax....
If so, I'm *really* glad I didn't upgrade my live version. :-O
- Charles
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html