more &

diff --git a/raddb/policy.d/abfab-tr b/raddb/policy.d/abfab-tr
index 454a04d..87d01a5 100644 (file)
--- a/raddb/policy.d/abfab-tr
+++ b/raddb/policy.d/abfab-tr
@@ -52,21 +52,21 @@ abfab_client_check {
 #  A policy which is used to validate channel-bindings.
 #
 abfab_channel_bindings {
-       if (GSS-Acceptor-Service-Name && (outer.request:GSS-Acceptor-Service-Name != GSS-Acceptor-Service-Name)) {
+       if (&GSS-Acceptor-Service-Name && (&outer.request:GSS-Acceptor-Service-Name != &GSS-Acceptor-Service-Name)) {
                reject
        }
 
-       if (GSS-Acceptor-Host-Name && outer.request:GSS-Acceptor-Host-Name != GSS-Acceptor-Host-Name ) {
+       if (&GSS-Acceptor-Host-Name && &outer.request:GSS-Acceptor-Host-Name != &GSS-Acceptor-Host-Name ) {
                reject
        }
 
-       if (GSS-Acceptor-Realm-Name && outer.request:GSS-Acceptor-Realm-Name != GSS-Acceptor-Realm-Name ) {
+       if (&GSS-Acceptor-Realm-Name && &outer.request:GSS-Acceptor-Realm-Name != &GSS-Acceptor-Realm-Name ) {
                reject
        }
 
-       if (GSS-Acceptor-Service-Name || GSS-Acceptor-Realm-Name || GSS-Acceptor-Host-Name) {
+       if (&GSS-Acceptor-Service-Name || &GSS-Acceptor-Realm-Name || &GSS-Acceptor-Host-Name) {
                update control {
-                       Chbind-Response-Code := success
+                       &Chbind-Response-Code := success
                }
 
                #
@@ -76,9 +76,9 @@ abfab_channel_bindings {
                #  then they won't be copied to the reply.
                #
                update reply {
-                       GSS-Acceptor-Service-Name = &GSS-Acceptor-Service-Name
-                       GSS-Acceptor-Host-Name = &GSS-Acceptor-Host-Name
-                       GSS-Acceptor-Realm-Name = &GSS-Acceptor-Realm-Name
+                       &GSS-Acceptor-Service-Name = &GSS-Acceptor-Service-Name
+                       &GSS-Acceptor-Host-Name = &GSS-Acceptor-Host-Name
+                       &GSS-Acceptor-Realm-Name = &GSS-Acceptor-Realm-Name
                }
        }