Re: [EXT] Copying User-Name from inner tunnel to outer for accounting

--===============8094290023336420468==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_233103CD-7FA5-435E-B6FA-4379758B738E";
	protocol="application/pgp-signature";
	micalg=pgp-sha256


--Apple-Mail=_233103CD-7FA5-435E-B6FA-4379758B738E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Jul 21, 2026, at 3:40=E2=80=AFPM, Brian Julin <[email protected]> =
wrote:
> I think there are two factors that keep people from doing so, and both =
share the
> same root cause:

  I'm not so sure.

  I think a major reason for not posting the debug output is a belief =
that it won't be helpful.

* "I don't know which parts are relevant, so I didn't post it"
* "I read it, and I didn't see anything that seemed relevant, so I =
didn't post it".

 The analogy here is someone having car trouble.  No one has car =
trouble, and then tells their mechanic:

* Hey, my car's acting funny.  But I'm not going to tell you what's =
going on.  You're the mechanic, you figure it out!
* I brought my car in, but I'm not sure what you need to know. So I'm =
going to leave my car locked in the parking lot, and get angry when you =
tell me that you need to look under the hood.

> the debug information is usually an immense really ugly looking
> thing that A) they would not normally post on a discussion/chat for =
fear of being
> "messy", and most people these days grew up with discussions/chats so =
they
> view a mailing list through that lens and B) Is full of details about =
what is most
> often a component of security infrastructure, where there is a concern =
about exposure
> requiring them to consider how to redact some details, some of which =
may not
> be amenable to a simple search/replace.

  For (A), I would expect that people read the documentation which says =
"POST ALL OF THE DEBUG OUTPUT".  Sadly, that expectant is often wrong.

  Even worse, I have no idea *where* we need to add more documentation, =
so that people will find it and read it.  =46rom what I can tell, there =
is a non-negligible set of people who have religious objections to =
reading documentation.

  For (B), I would expect that people be able to read the debug output =
for things they care about.  e.g. secrets, IP addresses, etc.  Even if =
you don't understand the output, it should be trivial to use "grep" to =
search for things.  Or, people should be capable of setting up test =
accounts with fake names.

  But that don't happen, either.

> Some sort of interactive post-processor for the debug input to pretty =
it up, clean out the
> true cruft, perform redactions/aliasing on any exposed server names or =
addresses,
> and maybe point out a few common issues if it sees them... might be a =
worthwhile
> endeavor.

  That would be nice, but at this point no one is going to contribute =
it.  The people who need it won't write it, and the people who don't =
need it are busy with other things.

  Alan DeKok.


--Apple-Mail=_233103CD-7FA5-435E-B6FA-4379758B738E
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=45Jh
-----END PGP SIGNATURE-----

--Apple-Mail=_233103CD-7FA5-435E-B6FA-4379758B738E--

--===============8094290023336420468==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============8094290023336420468==--