Class attribute questions
Greetings, I'm trying to look at the Class attribute during proxying. I want to take data stored in the Class attribute and rewrite other attribute(s) based on the contents. I have it working right now but have two questions regarding it. 1) I'm currently using rlm_exec to call a simple perl script that "decodes" the Class attribute value (from accessing %{Class}) from it's hex octet form back to the ASCII inside. I just wanted to make sure that I wasn't missing something, and that there isn't an easier way to get at the ASCII inside the octet stream. 2) The rfc's allow for more than one Class attribute (at least in Accounting-Request packets). How does FreeRADIUS treat references to %{Class} when this happens? i.e. Is there a syntax to refer to each instance of the Class attr or get a count of how many are in the packet? (I'm not currently running into this, but want to keep that base covered in case that situation arises). Thanks, -Shawn ~ Shawn O'Shea Network Engineer Airpath Wireless, Inc. "Clearing the Way" 781-250-3500-office 781-250-3535-direct 781-250-3503-fax [EMAIL PROTECTED] http://www.airpath.com ~ CONFIDENTIALITY STATEMENT This electronic message contains information from Airpath Wireless, Inc., and may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify the sender immediately by reply e-mail [EMAIL PROTECTED] or telephone at (781) 250-3500. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Class attribute questions
"Shawn K. O'Shea" <[EMAIL PROTECTED]> wrote: > 1) I'm currently using rlm_exec to call a simple perl script that > "decodes" the Class attribute value (from accessing %{Class}) from it's > hex octet form back to the ASCII inside. I just wanted to make sure that > I wasn't missing something, and that there isn't an easier way to get at > the ASCII inside the octet stream. Edit the dictionary, and change "octets" to "string"? > 2) The rfc's allow for more than one Class attribute (at least in > Accounting-Request packets). How does FreeRADIUS treat references to > %{Class} when this happens? i.e. Is there a syntax to refer to each > instance of the Class attr or get a count of how many are in the packet? The CVS snapshots allow this. 1.0.x doesn't. See doc/variables.txt Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Class attribute questions
> > I just wanted to make > > sure that I wasn't missing something, and that there isn't > an easier > > way to get at the ASCII inside the octet stream. > Edit the dictionary, and change "octets" to "string"? I saw discussion in a previous thread (Handling of the 'Class' attribute, this post in particular, http://lists.freeradius.org/mailman/htdig/freeradius-users/2003-July/021 267.html) that implied this was frowned upon, at least when interacting with other RADIUS servers (which is what I'm using FreeRADIUS for), but also because the RFC recommends that it should be treated as undistinguished octets. > > 2) The rfc's allow for more than one Class attribute (at least in > > Accounting-Request packets). How does FreeRADIUS treat > references to > > %{Class} when this happens? i.e. Is there a syntax to refer to each > > instance of the Class attr or get a count of how many are > in the packet? > The CVS snapshots allow this. 1.0.x doesn't. See doc/variables.txt I read through the current doc/variables.txt in CVS. Looks great. Is this a 1.1.x kind of feature or will it find it's way into a later 1.0.x? Thanks for the reply. -Shawn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Class attribute questions
"Shawn K. O'Shea" <[EMAIL PROTECTED]> wrote: > I saw discussion in a previous thread (Handling of the 'Class' > attribute, this post in particular, > http://lists.freeradius.org/mailman/htdig/freeradius-users/2003-July/021 > 267.html) that implied this was frowned upon, at least when interacting > with other RADIUS servers Editing the FreeRADIUS dictionary files will have *zero* impact on other RADIUS servers. > I read through the current doc/variables.txt in CVS. Looks great. Is > this a 1.1.x kind of feature or will it find it's way into a later > 1.0.x? 1.1.x and following. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html