Commit Graph

23 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
25fbdfbf70 Keep track of cookies internally.
That allows to restrict the cookie validity time to the absolutely minimum
required to establish and reconnect a recently disconnected session.
That deprecates the cookie-validity option and introduces the cookie-timeout
option.
2014-05-27 16:00:57 +02:00
Nikos Mavrogiannopoulos
6ca3c4761c Cookies are packed using protocol buffers to reduce their size. 2014-05-21 16:11:05 +02:00
Nikos Mavrogiannopoulos
d99c527758 memory reorganization in sec-mod.
It no longer relies on main pool, it uses it's own pool.
In addition the DEBUG_LEAKS definition was added to allow debugging
leaks.
2014-05-15 16:44:43 +02:00
Nikos Mavrogiannopoulos
09704b8819 Password authentication is now delegated to sec-mod.
That prevents any memory from the authentication modules to be leaked
to a worker process. As a result, the status zombie and dead no longer
exists.
2014-05-14 11:37:01 +02:00
Nikos Mavrogiannopoulos
dee376e8b1 reduced cookie size by only writing down the ipv4 seed. 2013-12-11 10:14:31 +01:00
Nikos Mavrogiannopoulos
cb5092e820 Augmented cookie format to store the seeds used to generate IPv4 and IPv6 addresses.
This ensures that if the IP previously used by a user is free, it will
be reassigned to him after a reconnection with the same cookie.
2013-12-11 10:03:47 +01:00
Nikos Mavrogiannopoulos
85f4db201c updated license information and authors 2013-11-05 19:38:30 +01:00
Nikos Mavrogiannopoulos
718ccd79c1 better function names and parameter order 2013-07-05 12:01:35 +02:00
Nikos Mavrogiannopoulos
126c52ab5c Cookies are no longer persistent 2013-07-01 12:18:51 +02:00
Nikos Mavrogiannopoulos
e8f6332f36 Use PAM account management and added support for user groups. 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
985da9e264 erase cookie data before forking to unprivileged process. 2013-02-09 21:28:30 +01:00
Nikos Mavrogiannopoulos
4434fd70fe several updates in cookies, and tun handling. 2013-02-08 18:22:18 +01:00
Nikos Mavrogiannopoulos
14460456e7 gdbm was re-added and made optional. 2013-02-07 20:43:11 +01:00
Nikos Mavrogiannopoulos
4370f88001 dropped dependency on gdbm. Cookies are stored in a hash. 2013-02-07 00:57:17 +01:00
Nikos Mavrogiannopoulos
1e0bcc269d reorganized headers 2013-02-05 22:11:38 +01:00
Nikos Mavrogiannopoulos
40c9a094a7 store hostname of the user, and pass it to scripts. 2013-02-05 21:21:40 +01:00
Nikos Mavrogiannopoulos
013cc82993 simplified call to expire cookies 2013-02-04 22:17:33 +01:00
Nikos Mavrogiannopoulos
73c36c31f9 master secret doesn't need to be generated by the server 2013-02-01 08:13:11 +01:00
Nikos Mavrogiannopoulos
6608f7ad7f Fixed UDP side. 2013-01-31 20:18:29 +01:00
Nikos Mavrogiannopoulos
0a8b951022 several updates and fixes in auth 2013-01-30 21:20:16 +01:00
Nikos Mavrogiannopoulos
25b0617081 better file structure 2013-01-30 19:00:29 +01:00
Nikos Mavrogiannopoulos
b24a3bf74b server_st -> worker_st 2013-01-29 20:19:23 +01:00
Nikos Mavrogiannopoulos
dd99c39110 Moved sources 2013-01-13 10:57:27 +01:00