trustrouter: permit trust-router-COI and error handling
authorSam Hartman <hartmans@debian.org>
Fri, 6 Mar 2015 19:19:52 +0000 (14:19 -0500)
committerSam Hartman <hartmans@debian.org>
Fri, 6 Mar 2015 19:22:15 +0000 (14:22 -0500)
commit363652aa86ba5ba934e21cb0de90a7b2fce63a00
tree6636bf1c66bbcb98c889a20cb2a9b1da7bea6972
parentbb0f27d597351e4e435d7b497260263bd38ddae5
trustrouter: permit trust-router-COI and error handling

Improve the error handling of the trust router integration.  Set
Error-Cause to indicate a proxy routing failure if we fail to get a
realm via trustrouter.  Include the error back from the trust router
in Reply-Message.

Set trust-router-coi in the trust router code rather than depending on
unlang to do so.  Permit a previously specified trust-router-coi in
the request to override the community in the configuration.  Unlang is
responsible for performing any authorization checks regarding
community.
src/include/radius.h
src/modules/rlm_realm/rlm_realm.c
src/modules/rlm_realm/trustrouter.c
src/modules/rlm_realm/trustrouter.h