On Fri, Sep 24, 2004 at 10:24:09AM -0400, Alan DeKok wrote:
> Oliver Graf <[EMAIL PROTECTED]> wrote:
> > I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one
> > small problem in the sql module: a Username seems to be quoted two
> > times, first when setting sql_user_name, then when doing the xlat on
> > the whole query.
> > 
> > Debug output:
> > radius_xlat:  'test=23test'
> 
>   Something is escaping '#' to '=23', probably in the SQL module.

Yeah. The Problem is that the allowed_chars string in 0.9.3 included
'=', but the one in 1.0.1 does not.

The pitty is that omitting '=' from allowed chars is obviously
correct, cause its the char used to quote stuff. Like you need to use
%% to get one %, an unescaped = should become a =3D.

But cause radius_xlat (or whatever else...) does not know if a value
of a pair is already escaped (as SQL-User-Name is), this creates some
ugly double escaping.

So the correct solution is to change the sql.conf and remove
SQL-User-Name from it, cause freeradius 1.0.1 will escape pairs used
inside queries always correctly, as it seems.

Oliver.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to