William Bulley wrote:
> This it true: the ntlm_auth line is expanded at run time.  My question in
> this thread is for the consideration of more throrough _syntax_ checking
> - without expansion - during the -XC process.

  How does the server now that some random module will expand some
random string in the configuration file?

  FYI, it's possible to have "%{...}" in a string which *isn't*
dynamically expanded.

>  Proper _syntax_ checking
> would have caught this gnarly typo.  Discovering the actual problem was
> made more difficult by admins assuming that -XC was more than the above
> described superficial configuration test.  Thank you for your repsonses.

  The only way to test run-time expansions is by running packets through
the server.

  If you have a *patch* which helps, great.  Until then...

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to