Alexander Clouter wrote:
> Okay, maybe my regex is bad...so I tested it:
> ----
> a...@berk:~$ cat moo 
> [email protected]
> xwfmnc02qnabzlq9wi9...@globalsign Root CA
> [email protected]
> [email protected]
> 
> a...@berk:~$ grep '[[:graph:]...@\([-[:alnum:]]\+\.\)\+[[:alpha:]]\{2,\}' moo
> [email protected]
> [email protected]
> [email protected]
> ----
> 
> Any ideas?  Bug?  Feature?

  FreeRADIUS uses the system regex libraries.  grep might be using its
own regex implementation.

  Specifically, I'm not sure [[:alpha:]] and friends are supported by
the system regex library.

  I would suggest writing the rules to sanitize realms in layers:

 - reject requests containing malformed User-Names (spaces, etc.)
 - proxy *known* realms to another virtual server to handle them
 - proxy *other* realms to eduroam.

  Eduroam should really be creating a routing protocol for RADIUS.  I
don't think it would be hard: git + ssh + text files.  See Section 2.7 of:

http://tools.ietf.org/id/draft-dekok-radext-nai-00.txt

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to