Subject: [abfab] Intent to Register two GSSEAP Error Codes

From: Sam Hartman <[email-masked]>
Date: Wed, 04 Mar 2015 07:22:52 -0500

Hi.

We've run across a desire to report two common errors from our  acceptor
back to the client.
Half the usable error space is available for FCFS registrations, and
it's my plan to request two error codes from that space.
Before I do that I wanted to let folks know what I'm requesting and have
a chance to comment:

error_code GSSEAP_RADIUS_UNROUTABLE, "Proxy had no route to identity
provider realm"

error_code GSSEAP_RADIUS_ADMIN_PROHIBIT, "IDP Administratively Prohibits Request"

These correspond to RADIUS error cause codes 502 and 501 respectively.

As an aside, our code doesn't currently have a good way to deal with the
split between the standards action error codes and the FCFS codes, but
I'll add that after the registrations are approved by IANA.