{ "ignore_default", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, rlm_realm_t, ignore_default), "no" },
{ "ignore_null", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, rlm_realm_t, ignore_null), "no" },
#ifdef HAVE_TRUST_ROUTER_TR_DH_H
- { "default_community", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t,default_community), "none" },
- { "rp_realm", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t,rp_realm), "none" },
- { "trust_router", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t,trust_router), "none" },
- { "tr_port", FR_CONF_OFFSET(PW_TYPE_INTEGER, rlm_realm_t,tr_port), "0" },
+ { "default_community", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t, default_community), "none" },
+ { "rp_realm", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t, rp_realm), "none" },
+ { "trust_router", FR_CONF_OFFSET(PW_TYPE_STRING, rlm_realm_t, trust_router), "none" },
+ { "tr_port", FR_CONF_OFFSET(PW_TYPE_INTEGER, rlm_realm_t, tr_port), "0" },
#endif
CONF_PARSER_TERMINATOR
};
* Try querying for the dynamic realm.
*/
if (!realm && inst->trust_router) {
- realm = tr_query_realm(request, realmname, inst->default_community, inst->rp_realm, inst->trust_router, inst->tr_port);
+ realm = tr_query_realm(request, realmname, inst->default_community, inst->rp_realm, inst->trust_router,
+ inst->tr_port);
} else {
RDEBUG2("No trust router configured, skipping dynamic realm lookup");
}
};
-bool tr_init(void)
+bool tr_init(void)
{
if (global_tidc) return true;
if (tls) talloc_free(tls);
return NULL;
}
-
+
static char *build_pool_name(TALLOC_CTX *ctx, TID_RESP *resp)
{
size_t index, sa_len, sl;
tid_srvr_get_address(blk, &sa, &sa_len);
fr_sockaddr2ipaddr((struct sockaddr_storage *) sa, sa_len, &home_server_ip, &port);
-
+
if (0 != getnameinfo(sa, sa_len,
nametemp,
sizeof nametemp,
hs->secret = talloc_strdup(hs, "radsec");
hs->response_window.tv_sec = 30;
hs->last_packet_recv = time(NULL);
- /*
- * We want sockets using these servers to close as soon as possible,
- * to make sure that whenever a pool is replaced, sockets using old ones
+ /*
+ * We want sockets using these servers to close as soon as possible,
+ * to make sure that whenever a pool is replaced, sockets using old ones
* will not last long (hopefully less than 300s).
*/
hs->limit.idle_timeout = 5;
}
return;
}
-
+
if (!nr) {
nr = talloc_zero(NULL, REALM);
if (!nr) goto error;
opaque->output_realm = nr;
return;
-
+
error:
if (nr && !opaque->orig_realm) {
talloc_free(nr);
/*
* These values don't make sense.
*/
- if ((server->last_packet_recv > (now + 5)) ||
+ if ((server->last_packet_recv > (now + 5)) ||
(server->last_failed_open > (now + 5))) {
continue;
}
return true;
}
-
+
REALM *tr_query_realm(REQUEST *request, char const *realm,
char const *community,
talloc_free(cookie.fr_realm_name);
return cookie.orig_realm;
}
-
+
/* Set-up TID connection */
DEBUG2("Opening TIDC connection to %s:%u", trustrouter, port);
}
/* Send a TID request */
- rcode = tidc_send_request(global_tidc, conn, gssctx, (char *)rprealm,
- (char *) realm, (char *)community,
+ rcode = tidc_send_request(global_tidc, conn, gssctx, (char *)rprealm,
+ (char *) realm, (char *)community,
&tr_response_func, &cookie);
if (rcode < 0) {
/* Handle error */
if (cookie.result != TID_SUCCESS) {
DEBUG2("TID response is error, rc = %d: %s.\n", cookie.result,
cookie.err_msg?cookie.err_msg:"(NO ERROR TEXT)");
- if (cookie.err_msg)
+ if (cookie.err_msg)
pair_make_reply("Reply-Message", cookie.err_msg, T_OP_SET);
pair_make_reply("Error-Cause", "502", T_OP_SET); /*proxy unroutable*/
}