tac_plus-ng. Strange behaviour in rule calculation

13 views
Skip to first unread message

Petr Issakov

unread,
Mar 27, 2024, 6:11:40 AMMar 27
to Event-Driven Servers
Hi, Marc!
I have noticed some strange calculation in rules
I have rule:
rule ipcore_time_spec {
enabled = yes
script {
label = "NOTserviceHours"
if (member == UTC2 && time == serviceHoursUTC2) {
label = "serviceHours2"
}
if (member == UTC3 && time == serviceHoursUTC3) {
label = "serviceHours3"
}
if (member == UTC4 && time == serviceHoursUTC4) {
label = "serviceHours4"
}
if (member == UTC5 && time == serviceHoursUTC5) {
label = "serviceHours5"
}
if (member == UTC6 && time == serviceHoursUTC6) {
label = "serviceHours6"
}
if (member == UTC7 && time == serviceHoursUTC7) {
label = "serviceHours7"
}
if (member == UTC8 && time == serviceHoursUTC8) {
label = "serviceHours8"
}
}
}

in tactrace I see multiple rule calculation:
Is my code incorrect?

10.5.72.11 Start authorization request
10.5.72.11 pcre2: '^.*$' <=> 'petr.isakov' = 1
10.5.72.11 pcre2: setting username to 'petr.isakov'
10.5.72.11  line 2: [rewrite]
10.5.72.11 user 'petr.isakov' found
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 810: [label] 'NOTserviceHours'
10.5.72.11  line 811: [member] member 'UTC2' => false
10.5.72.11  line 811: [&&] => false
10.5.72.11  line 814: [member] member 'UTC3' => true
10.5.72.11  line 814: [<unknown>] time '' => false
10.5.72.11  line 814: [&&] => false
10.5.72.11  line 817: [member] member 'UTC4' => false
10.5.72.11  line 817: [&&] => false
10.5.72.11  line 820: [member] member 'UTC5' => false
10.5.72.11  line 820: [&&] => false
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 811: [member] member 'UTC2' => false
10.5.72.11  line 811: [&&] => false
10.5.72.11  line 814: [member] member 'UTC3' => true
10.5.72.11  line 814: [<unknown>] time '' => false
10.5.72.11  line 814: [&&] => false
10.5.72.11  line 817: [member] member 'UTC4' => false
10.5.72.11  line 817: [&&] => false
10.5.72.11  line 820: [member] member 'UTC5' => false
10.5.72.11  line 820: [&&] => false
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 814: [member] member 'UTC3' => true
10.5.72.11  line 814: [<unknown>] time '' => false
10.5.72.11  line 814: [&&] => false
10.5.72.11  line 817: [member] member 'UTC4' => false
10.5.72.11  line 817: [&&] => false
10.5.72.11  line 820: [member] member 'UTC5' => false
10.5.72.11  line 820: [&&] => false
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 817: [member] member 'UTC4' => false
10.5.72.11  line 817: [&&] => false
10.5.72.11  line 820: [member] member 'UTC5' => false
10.5.72.11  line 820: [&&] => false
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 820: [member] member 'UTC5' => false
10.5.72.11  line 820: [&&] => false
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 823: [member] member 'UTC6' => false
10.5.72.11  line 823: [&&] => false
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 826: [member] member 'UTC7' => false
10.5.72.11  line 826: [&&] => false
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 evaluating ACL ipcore_time_spec
10.5.72.11  line 829: [member] member 'UTC8' => false
10.5.72.11  line 829: [&&] => false
10.5.72.11 ACL ipcore_time_spec: no match
10.5.72.11 petr....@10.11.176.96: ACL ipcore_time_spec: <unknown> (profile: n/a)
10.5.72.11 evaluating ACL ipcore_spans
10.5.72.11  line 929: [member] member 'ipcore_ALL' => true
10.5.72.11  line 929: [nas] host 'ipcore_ALL' => true
10.5.72.11  line 929: [&&] => true
10.5.72.11  line 929: [||] => true
10.5.72.11  line 929: [!] => false
10.5.72.11 ACL ipcore_spans: no match

Marc Huber

unread,
Mar 27, 2024, 11:16:40 AMMar 27
to event-driv...@googlegroups.com
Hi Petr,

thanks for reporting this bug! I've just pushed a fix.

Cheers,

Marc

Petr Issakov

unread,
Mar 28, 2024, 12:54:47 AMMar 28
to Event-Driven Servers
Hi, Marc!
Now all ok!
Thank you very much for quick answering and fixing!

среда, 27 марта 2024 г. в 21:16:40 UTC+6, Marc Huber:
Reply all
Reply to author
Forward
0 new messages