allow for old-style names, too

[freeradius.git] / raddb / sites-available / default

diff --git a/raddb/sites-available/default b/raddb/sites-available/default
index e16363f..0834075 100644 (file)
--- a/raddb/sites-available/default
+++ b/raddb/sites-available/default
@@ -262,12 +262,22 @@ authorize {
        filter_username
 
        #
+       #  Some broken equipment sends passwords with embedded zeros.
+       #  i.e. the debug output will show
+       #
+       #       User-Password = "password\000\000"
+       #
+       #  This policy will fix it to just be "password".
+       #
+#      filter_password
+
+       #
        #  The preprocess module takes care of sanitizing some bizarre
        #  attributes in the request, and turning them into attributes
        #  which are more standard.
        #
-       #  It takes care of processing the 'raddb/hints' and the
-       #  'raddb/huntgroups' files.
+       #  It takes care of processing the 'raddb/mods-config/preprocess/hints' 
+       #  and the 'raddb/mods-config/preprocess/huntgroups' files.
        preprocess
 
        #  If you intend to use CUI and you require that the Operator-Name
@@ -464,6 +474,11 @@ authenticate {
        }
 
        #
+       #  For old names, too.
+       #
+       mschap
+
+       #
        #  If you have a Cisco SIP server authenticating against
        #  FreeRADIUS, uncomment the following line, and the 'digest'
        #  line in the 'authorize' section.