update documentation to match code behavior.

v4 now only has *filtering*, not *enforcement* operators.  That is,
if "Session-Timeout = 0", doing:

	update request {
		Session-Timeout > 86400
	}

Will *delete* the non-matching Session-Timeout.  It will not *add*
or *update* the Session-Timeout to be 86400.

Which means that in v4, we should probably have a "filter" section,
instead of an "update" section, to make this behavior clearer.

diff --git a/man/man5/unlang.5 b/man/man5/unlang.5
index dbba05a0cc7d378a9bbeba52896718fbf17a8d50..6748235981c79667a5ba57401e98cb0a210e2e82 100644 (file)
--- a/man/man5/unlang.5
+++ b/man/man5/unlang.5
@@ -10,7 +10,7 @@
 .RE
 .sp
 ..
-.TH unlang 5 "02 January 2016" "" "FreeRADIUS Processing un-language"
+.TH unlang 5 "04 January 2016" "" "FreeRADIUS Processing un-language"
 .SH NAME
 unlang \- FreeRADIUS Processing un\-language
 .SH DESCRIPTION
@@ -777,44 +777,38 @@ of the expression resolves to multiple values, it means add all values
 to the tail of the list.
 .RE
 .PP
-Enforcement and Filtering Operators
+Filtering Operators
 .RS
 The following operators may also be used in addition to the ones
-listed above.  Their function is to perform enforcement or filtering
-on attributes in a list.
+listed above.  Their function is to perform filtering of attributes in
+a list.
+
+Note that unlike earlier versions of the server, there is no
+enforcement.  That is, if the attribute does not exist, it is not
+added with the given value.
 .IP -=
 Remove all matching attributes from the list.  Both the attribute name
 and value have to match in order for the attribute to be removed from
 the list.
 .IP ==
-Keep all matching attributes.  Both the attribute name and value have
-to match in order for the attribute to remain in the list.
+Keep only those attributes which have values matching the given one.
 
-Note that this operator is very different than the '=' operator listed
-above!
+Note that this operator (eqaulity filtering) is very different than
+the '=' operator (set if not already existing) described above!
 .IP !=
-Keep all attributes with matching name, and value not equal to the
+Keep only those attributes which have values not equal to the
 given one.
 .IP <
-Keep all attributes having values less than the value
-given here.  Any larger value is replaced by the value given here.  If
-no attribute exists, it is added with the value given here, as with
-"+=".
+Keep only those attributes which have values less than the given one.
 .IP <=
-Keep all attributes having values less than, or equal to, the value
-given here.  Any larger value is replaced by the value given here.  If
-no attribute exists, it is added with the value given here, as with
-"+=".
+Keep only those attributes which have values less than, or equal to,
+the given one.
 .IP >
-Keep all attributes having values greater than the value
-given here.  Any smaller value is replaced by the value given here.  If
-no attribute exists, it is added with the value given here, as with
-"+=".
+Keep only those attributes which have values greater than the given
+one.
 .IP >=
-Keep all attributes having values greater than, or equal to, the value
-given here.  Any smaller value is replaced by the value given here.  If
-no attribute exists, it is added with the value given here, as with
-"+=".
+Keep only those attributes which have values greater than, or equal
+to, the given one.
 .IP !*
 Delete all occurrences of the named attribute, no matter what the
 value.

diff --git a/raddb/README.rst b/raddb/README.rst
index ea6646a10f285e13d2c8269d72837a6b65d5c7b5..aeb493e67a09912a7ee0adae422067e7b824de91 100644 (file)
--- a/raddb/README.rst
+++ b/raddb/README.rst
@@ -74,6 +74,15 @@ modifications will be required.
 Use of attributes in xlats e.g. ``%{User-Name}`` remains unchanged.
 There is no plan to require prefixes here.
 
+Update sections and Filtering
+-----------------------------
+
+The filtering operators in v4 have been modified.  They no longer
+*set* the attribute to a value.  Instead, they only *filter* the
+attribute list, and delete any attributes which do not match.  The
+filtering operators do not *create* any attribute.
+
+
 Connection timeouts
 -------------------