Hi. We've been working with Alan to get some changes related to Moonshot (http://www.project-moonshot.org/ ) into FreeRADIUS. Thanks to his work, most of our changes are now in the code base. There's one change not yet integrated related to the support of a trust router for dynamic realm provisioning. We're putting together a number of sample policies. In particular: * Updates to the channel binding virtual server to do correct matching of ABFAB requests information * A policy for an ABFAB IDP (home AAA server) to use to verify that information supplied by the NAS matches what's expected for that NAS according to a database provisioned by the trust router * A policy to run on a proxy near the NAS to verify that the NAS is claiming the correct identity based on client configuration. None of these policies actually depend on the trust router code that isn't yet integrated, although most useful configurations where you'd want to turn on these policies would require that code. we'd like to supply these sample policies to be included. For the most part our preference is to give a policy.d file so that it can be easily updated. would you prefer that we also contribute commented out code to invoke this policy at the right places in sites-available? Should we contribute a sample database module to demonstrate the database we're using Or would you rather us put that in the trust router package? Thanks, --Sam