GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-14 02:22:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

Added support for session control (relevant for PAM for now)

Browse Source 
That in effect will utilize the pam_open_session() and pam_close_session().
It is disabled by default as it requires more resources from the security module.
This commit is contained in:
Nikos Mavrogiannopoulos
2014-06-10 15:16:40 +02:00
parent 01db3e5817
commit 28dca2aa0c
19 changed files with 307 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/config.c
+3
View File
@@ -85,6 +85,7 @@ static struct cfg_options available_options[] = {
{ .name = "occtl-socket-file", .type = OPTION_STRING, .mandatory = 0 },
{ .name = "banner", .type = OPTION_STRING, .mandatory = 0 },
{ .name = "predictable-ips", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "session-control", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "auto-select-group", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "default-select-group", .type = OPTION_STRING, .mandatory = 0 },
/* this is alias for cisco-client-compat */
@@ -439,6 +440,8 @@ unsigned force_cert_auth;
if (config->occtl_socket_file == NULL)
config->occtl_socket_file = talloc_strdup(config, OCCTL_UNIX_SOCKET);
READ_TF("session-control", config->session_control, 0);
READ_STRING("banner", config->banner);
READ_TF("cisco-client-compat", config->cisco_client_compat, 0);
READ_TF("always-require-cert", force_cert_auth, 1);