chbind: sample virtual server

this is a sample channel binding virtual server for
draft-ietf-abfab-gss-eap.  It's not complete but is intended to be
sufficient to start testing.

diff --git a/raddb/sites-available/chbind b/raddb/sites-available/chbind
new file mode 100644 (file)
index 0000000..4b07bd3
--- /dev/null
+++ b/raddb/sites-available/chbind
@@ -0,0 +1,19 @@
+server chbind{
+    authorize {
+       if (GSS-Acceptor-Service-Name && outer.request:GSS-Acceptor-Service-Name != GSS-Acceptor-Service-Name ) {
+           reject
+       }
+       update reply {
+           GSS-Acceptor-Service-NAME == "%{GSS-ACCEPTOR-SERVICE-Name}"
+           GSS-ACCEPTOR-Host-Name == "%{GSS-Acceptor-Host-Name}"
+           GSS-Acceptor-Realm-Name == "%{GSS-Acceptor-Realm-Name}"
+       }
+       if (GSS-Acceptor-Service-Name || GSS-Acceptor-Realm-Name || GSS-Acceptor-Host-Name) {
+           update control {
+               Chbind-Response-Code := success
+           }
+       }
+       handled
+    }
+}
+