NAI policy should always return updated if the User-Name string matched the format

diff --git a/raddb/policy.conf b/raddb/policy.conf
index a0f3d4c..e3b5e9f 100644 (file)
--- a/raddb/policy.conf
+++ b/raddb/policy.conf
@@ -116,12 +116,15 @@ policy {
        #  regular expressions (or at least not a legible one).
        #
        split_username_nai {
-                       if(User-Name =~ /^([^@]*)(@([-[:alnum:]]+\\.[-[:alnum:].]+))?$/){
-                               update request {
-                                       Stripped-User-Name := "%{1}"
-                                       Stripped-User-Domain = "%{3}"
-                               }
+               if(User-Name =~ /^([^@]*)(@([-[:alnum:]]+\\.[-[:alnum:].]+))?$/){
+                       update request {
+                               Stripped-User-Name := "%{1}"
+                               Stripped-User-Domain = "%{3}"
                        }
+                       # If any of the expansions result in a null string, the update
+                       # section may return something other than updated...
+                       updated
+               }
                else{
                        noop
                }