remove '&' from krb5

Author: alandekok

doc/antora/modules/reference/pages/raddb/mods-available/krb5.adoc

@@ -81,8 +81,8 @@ krb5
 krb5 {
 	keytab = /path/to/keytab
 	service_principal = name_of_principle
-#	username = &User-Name
-#	password = &User-Password
+#	username = User-Name
+#	password = User-Password
 	reuse {
 #		min = 10
 #		max = 100

raddb/mods-available/krb5

@@ -31,11 +31,11 @@ krb5 {
 	#
 	#  If this is just a user name, then the default Kerberos realm will
 	#  automatically be added.
-#	username = &User-Name
+#	username = User-Name
 
 	#
 	#  password:: The password to use in user authentication
-#	password = &User-Password
+#	password = User-Password
 
 	#
 	#  .Reusable Handles

src/modules/rlm_krb5/rlm_krb5.c

@@ -485,10 +485,10 @@ static unlang_action_t CC_HINT(nonnull) mod_authenticate(rlm_rcode_t *p_result,
 static const call_env_method_t krb5_auth_call_env = {
 	FR_CALL_ENV_METHOD_OUT(krb5_auth_call_env_t),
 	.env = (call_env_parser_t[]) {
-		{ FR_CALL_ENV_OFFSET("username", FR_TYPE_STRING, CALL_ENV_FLAG_REQUIRED, krb5_auth_call_env_t, username),
-			.pair.dflt = "&User-Name", .pair.dflt_quote = T_BARE_WORD },
-		{ FR_CALL_ENV_OFFSET("password", FR_TYPE_STRING, CALL_ENV_FLAG_SECRET | CALL_ENV_FLAG_REQUIRED, krb5_auth_call_env_t, password),
-			.pair.dflt = "&User-Password", .pair.dflt_quote = T_BARE_WORD },
+		{ FR_CALL_ENV_OFFSET("username", FR_TYPE_STRING, CALL_ENV_FLAG_REQUIRED| CALL_ENV_FLAG_BARE_WORD_ATTRIBUTE, krb5_auth_call_env_t, username),
+			.pair.dflt = "User-Name", .pair.dflt_quote = T_BARE_WORD },
+		{ FR_CALL_ENV_OFFSET("password", FR_TYPE_STRING, CALL_ENV_FLAG_SECRET | CALL_ENV_FLAG_REQUIRED| CALL_ENV_FLAG_BARE_WORD_ATTRIBUTE, krb5_auth_call_env_t, password),
+			.pair.dflt = "User-Password", .pair.dflt_quote = T_BARE_WORD },
 		CALL_ENV_TERMINATOR
 	}
 };