From: Alberto Leiva Popper <ydahhrk@gmail.com>
Date: Mon, 8 Jun 2026 15:39:01 +0000 (-0600)
Subject: Print CAS on provider list too long
X-Git-Tag: 1.7.0.experimental~14
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=39ab2b8278df5c45cfd2606e5dc8bf068da2a268;p=thirdparty%2FFORT-validator.git

Print CAS on provider list too long

Was missing the SHOULD:

> Relying Party implementations are RECOMMENDED to impose an upper
> bound on the number of Provider ASes for a given CAS.
> (...) an error SHOULD be logged in the
> local system, indicating the CAS for which the threshold was
> exceeded.
---

diff --git a/src/object/aspa.c b/src/object/aspa.c
index 2589f7bd..77613fc9 100644
--- a/src/object/aspa.c
+++ b/src/object/aspa.c
@@ -89,8 +89,8 @@ parse_providers(ProviderASSet_t *set, struct aspa *aspa)
 
 	limit = config_get_max_aspa_providers();
 	if (set->list.count > limit)
-		return pr_val_err("Too many providers: %d > %u",
-		    set->list.count, limit);
+		return pr_val_err("customerASID %u has too many providers: %d > %u",
+		    aspa->customer, set->list.count, limit);
 
 	providers = pcalloc(set->list.count, sizeof(uint32_t));
 	for (i = 0; i < set->list.count; i++) {