[tac_plus] host acl always denies

heasley heas at shrubbery.net
Mon Jan 23 18:46:57 UTC 2012


Mon, Jan 23, 2012 at 10:22:04AM +0200, Ignas Kazlauskas:
> --- config.c.orig       2012-01-23 09:31:32.771632186 +0200
> +++ config.c    2012-01-23 09:31:46.107154201 +0200
> @@ -2044,7 +2044,7 @@
> 
>      next = acl->nodes;
>      while (next) {
> -       if (regexec((regex_t *)next->value1, ip, 0, NULL, 0) != REG_OK) {
> +       if (regexec((regex_t *)next->value1, ip, 0, NULL, 0) == REG_OK) {
>             if (debug & DEBUG_AUTHEN_FLAG)
>                 report(LOG_DEBUG, "ip %s matched %s regex %s of acl
> filter %s",
>                         ip, next->type == S_deny ? "deny" : "permit",
> 
> 
> Now acls works as they should, it seems.

sigh.  indeed; my test cases were not complete.  sorry


More information about the tac_plus mailing list