must

must

Requires another action to return an accept or reject result. If the wrapped action returns ignore, must converts the result to reject and sets aaa.reason.

Use must when an action should be applicable to the current request. For example, use it to reject a request that does not contain credentials for the configured authentication method.

Syntax

must <action>;
must <action> { }

Example

@execute {
    must pap;
}

If the request does not contain a PAP password, pap returns ignore. The must action converts that ignore result to reject.

Result Handling

must preserves accept and reject results from the wrapped action:

• Accept remains accept.
• Reject remains reject.
• Ignore becomes reject.

When ignore becomes reject, must sets aaa.reason to must: unexpected ignore from the wrapped '<action-name>' action

Related Actions

• try - convert action errors to ignore
• reject - explicitly reject a request
• pap - authenticate a PAP password