summaryrefslogtreecommitdiffstats
path: root/man/man5/rlm_expr.5
blob: 313a16e1b0a428a8fc6a19f6973b2ffc12acbebd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
.\"     # DS - begin display
.de DS
.RS
.nf
.sp
..
.\"     # DE - end display
.de DE
.fi
.RE
.sp
..
.TH rlm_expr 5 "5 February 2004" "" "FreeRADIUS Module"
.SH NAME
rlm_expr \- FreeRADIUS Module
.SH DESCRIPTION
The \fIrlm_expr\fP module allows the server to perform
limited mathematical calculations.  This module is not called
directly in any section, it is invoked through the dynamic expansion
of strings.
.PP
For example, some NAS boxes send a NAS-Port attribute
which is a 32-bit number composed of port, card, and interface, all in
different bytes.  To see these attributes split into pieces, you can
have an entry in the 'users' file like:

.DS
DEFAULT
.br
    Vendor-Interface = `%{expr: %{NAS-Port} / (256 * 256)}`,
.br
    Vendor-Card = `%{expr: (%{NAS-Port} / 256) %% 256}`,
.br
    Vendor-Port = `%{expr: %{NAS-Port} %% 256}`
.br

.DE
where the attributes Vendor-Interface, Vendor-Card, and Vendor-Port
are attributes created by either you or a vendor-supplied
dictionary.

The mathematical operators supported by the expression module are:
.TP
.B +
addition
.TP
.B -
subtraction
.TP
.B /
division
.TP
.B %%
modulo remainder
.TP
.B *
multiplication
.TP
.B &
boolean AND
.TP
.B |
boolean OR
.TP
.B ()
grouping of sub-expressions
.PP
NOTE: The modulo remainder operator is '%%', and not '%'.  This
is due to the '%' character being used as a special character for
dynamic translation.
.PP
NOTE: These operators do NOT have precedence.  The parsing
of the input string, and the calculation of the answer, is done
strictly left to right.  If you wish to order the expressions, you
MUST group them into sub-expression, as shown in the previous
example.
.PP
All of the calculations are performed as unsigned 32-bit integers.
.DE
.SH CONFIGURATION
.DS
modules {
  ...
.br
  expr {
.br
  }
.br
  ...
.br
}
.br
 ...
.br
instantiate {
  ...
.br
  expr
  ...
.br
}
.SH SECTIONS
.BR instantiate
.PP
.SH FILES
.I /etc/raddb/radiusd.conf
.PP
.SH "SEE ALSO"
.BR radiusd (8),
.BR radiusd.conf (5)
.SH AUTHOR
Chris Parker, cparker@segv.org