From: Alan T. DeKok Date: Tue, 29 Aug 2017 14:32:44 +0000 (-0400) Subject: note name change of sections X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=53a93a0af1a5bcb511bb5262cdadc14ae86671b1;p=thirdparty%2Ffreeradius-server.git note name change of sections --- diff --git a/man/man5/unlang.5 b/man/man5/unlang.5 index 6ec91f62405..d05fcf3413c 100644 --- a/man/man5/unlang.5 +++ b/man/man5/unlang.5 @@ -10,7 +10,7 @@ .RE .sp .. -.TH unlang 5 "29 June 2017" "" "FreeRADIUS Processing un-language" +.TH unlang 5 "29 August 2017" "" "FreeRADIUS Processing un-language" .SH NAME unlang \- FreeRADIUS Processing un\-language .SH DESCRIPTION @@ -23,9 +23,8 @@ Python modules rlm_perl, or rlm_python. The goal of the language is to allow simple policies to be written with minimal effort. Those policies are then applied when a request is being processed. Requests are processed through virtual servers -(including the default one), in the sections titled "authorize", -"authenticate", "post-auth", "preacct", "accounting", "pre-proxy", -and "post-proxy". +(including the default one), in the sections titled "recv +Access-Request", "send Access-Accept", "authenticate pap", etc. These policies cannot be used in any other part of the configuration files, such as module or client configuration. @@ -215,10 +214,9 @@ the current block. } .DE -The can be one of "request", "reply", "proxy-request", -"proxy-reply", "session-state", or "control". As -of Version 3, the can be omitted, in which case "request" is -assumed. +The can be one of "request", "reply", "session-state", or +"control". As of Version 3, the can be omitted, in which case +"request" is assumed. The "control" list is the list of attributes maintainted internally by the server that controls how the server processes the request. Any @@ -230,6 +228,9 @@ EAP-TTLS), the inner tunnel session can also reference "outer.request", "outer.reply", and "outer.control". Those references allow you to address the relevant list in the outer tunnel session. +The word "parent" may also be used as a synonym to "outer". +e.g. "parent.request", etc. + The "session-state" list is primarily used for EAP. Attributes put into the "session-state" list are saved for the next packet in the session. They are automatically retrieved when the next packet is @@ -325,9 +326,9 @@ key is given, a module is chosen at random. .IP return .br -Returns from the current top-level section, e.g. "authorize" or -"authenticate". This keyword is mainly used to avoid layers of nested -"if" and "else" statements. +Returns from the current section, and stops all processing. This +keyword is mainly used to avoid layers of nested "if" and "else" +statements. .DS recv Access-Request {