Nikos Mavrogiannopoulos
41862db757
doc update
2014-01-19 08:42:08 +01:00
Nikos Mavrogiannopoulos
baf12348d4
Added proc_st status PS_AUTH_FAILED to prevent users that failed authentication to leave a zombie proc_st.
2014-01-19 04:14:56 +01:00
Nikos Mavrogiannopoulos
add57c5d32
use pselect() in worker process as well.
2014-01-19 04:10:42 +01:00
Nikos Mavrogiannopoulos
b611537683
better message when cannot reach server.
2014-01-19 04:02:31 +01:00
Nikos Mavrogiannopoulos
1ac47546f7
main-ctl-handler.c
...
when disconnecting IDs and ID==-1 then continue looping until all zombies have been cleaned up.
2014-01-19 04:00:57 +01:00
Nikos Mavrogiannopoulos
0f7e59a4f5
list users -> show users
2014-01-19 04:00:16 +01:00
Nikos Mavrogiannopoulos
f174f655db
remove zombie proc_st when its state has been 'stolen'
2014-01-19 04:00:02 +01:00
Nikos Mavrogiannopoulos
ef647c0190
reduce maintainance time to remove zombie processes sooner.
2014-01-19 03:43:30 +01:00
Nikos Mavrogiannopoulos
79b6f226af
when taking the state of a proc_st set its status to zombie.
2014-01-19 03:43:03 +01:00
Nikos Mavrogiannopoulos
3105398cc0
do not give information on zombie processes
2014-01-19 03:41:59 +01:00
Nikos Mavrogiannopoulos
445fcb666b
info printing updates
2014-01-19 03:41:35 +01:00
Nikos Mavrogiannopoulos
a88f30f3c9
updated copyright date
2014-01-19 03:21:25 +01:00
Nikos Mavrogiannopoulos
d83d71bf7a
updated authors
2014-01-19 03:14:43 +01:00
Nikos Mavrogiannopoulos
b9fe6b6263
instead of using the TLS session ID as session identifier prior to authentication use the webvpncontext cookie.
2014-01-19 02:59:04 +01:00
Nikos Mavrogiannopoulos
90a9286b88
send auth reply failure when needed.
2014-01-18 16:06:37 +01:00
Nikos Mavrogiannopoulos
ef537d6846
doc update
2014-01-18 15:08:51 +01:00
Nikos Mavrogiannopoulos
7145db0d54
Added sketch of authentication protocol between main and worker.
2014-01-18 15:06:16 +01:00
Nikos Mavrogiannopoulos
b1af6f2829
enabling cisco-client-compat allows 'stealing' of processes.
...
This change puts a proc_st that its client has terminated to a "zombie"
state. That state will allow a client that connects later using the
same TLS session ID to reclaim it. That way clients that try to authenticate
by sending their credentials in different sessions can still authenticate with
ocserv. That however puts more trust to worker processes (as the main
process has no way of telling whether a TLS session is certainly
resumed).
2014-01-18 15:06:10 +01:00
Nikos Mavrogiannopoulos
d454557649
replace always-require-cert with cisco-client-compat.
2014-01-18 11:19:19 +01:00
Nikos Mavrogiannopoulos
bee6a99450
added missing dependency
2014-01-18 11:19:06 +01:00
Nikos Mavrogiannopoulos
fdee40d276
documented all dependencies
2014-01-18 11:09:16 +01:00
Nikos Mavrogiannopoulos
6c078f2397
configure info update
2014-01-14 17:36:40 +01:00
Nikos Mavrogiannopoulos
6eaa81cf73
corrected prototype
2014-01-14 17:31:19 +01:00
Nikos Mavrogiannopoulos
e43840db05
send empty array instead of nothing when a user or ID aren't found.
2014-01-14 10:34:34 +01:00
Nikos Mavrogiannopoulos
8f9cef9665
print correct error when a user or ID are not found
2014-01-14 10:34:09 +01:00
Nikos Mavrogiannopoulos
766ab8ee21
Added function to print network interface statistics.
2014-01-14 10:20:47 +01:00
Nikos Mavrogiannopoulos
68bd5af105
free the output of gnutls_session_get_desc
2014-01-14 07:39:53 +01:00
Nikos Mavrogiannopoulos
81c20b9237
export ID env variable
2014-01-13 19:04:56 +01:00
Nikos Mavrogiannopoulos
2e068ad0b9
more files to ignore
2014-01-12 18:30:03 +01:00
Nikos Mavrogiannopoulos
cc6473a92a
print file name instead of function name
2014-01-12 18:24:13 +01:00
Nikos Mavrogiannopoulos
823190475b
print textual name of messages exchanged.
2014-01-12 18:23:29 +01:00
Nikos Mavrogiannopoulos
39572b3d48
Store User-Agent information and send to occtl.
2014-01-12 14:35:58 +01:00
Nikos Mavrogiannopoulos
b8a4fdf530
unset needs_compact_auth if client changes its mind.
2014-01-12 14:19:10 +01:00
Nikos Mavrogiannopoulos
a08a03d70e
use a common version message.
2014-01-12 14:09:07 +01:00
Nikos Mavrogiannopoulos
4a8513b393
use config-auth header in success message
2014-01-12 14:08:13 +01:00
Nikos Mavrogiannopoulos
4fe59287f5
removed vpn-client-pkg-version which didn't seem to affect anything.
2014-01-12 14:06:23 +01:00
Nikos Mavrogiannopoulos
6fea92a961
combined CSCOT URLs
2014-01-12 12:40:58 +01:00
Nikos Mavrogiannopoulos
2e2310187d
Replaced the username cookie with a compact auth option.
...
That option performs authentication of username, password in
a single go for clients that request Connection: Close.
2014-01-12 12:01:08 +01:00
Nikos Mavrogiannopoulos
151f107591
use config-auth XML format.
2014-01-12 11:04:42 +01:00
Nikos Mavrogiannopoulos
eb09efb6d7
corrected size calculation for CONFIG_MSG
2014-01-12 10:23:39 +01:00
Nikos Mavrogiannopoulos
3c82dc7787
report the file name plus line instead of function name.
2014-01-12 10:19:42 +01:00
Nikos Mavrogiannopoulos
3d0a69e5f6
Indicate properly the status of TLS authentication when a client has reconnected.
2014-01-12 10:16:10 +01:00
Nikos Mavrogiannopoulos
089e8a7c30
updated copyrights
2014-01-12 10:01:48 +01:00
Nikos Mavrogiannopoulos
eba1c9255b
Allow a client to reconnect and continue authentication.
...
That allows clients like CISCO anyconnect to resume authentication
in a different session by keeping the username in a cookie. That
works only when a single password is used.
2014-01-12 09:52:31 +01:00
Nikos Mavrogiannopoulos
1aee463ab4
Advertize a very low version of client.
2014-01-11 23:53:47 +01:00
Nikos Mavrogiannopoulos
a545062cec
stricter check of acceptable states.
2014-01-11 23:40:49 +01:00
Nikos Mavrogiannopoulos
50d63259b8
more debug messages and be more strict when cannot read the password.
2014-01-11 23:30:49 +01:00
Nikos Mavrogiannopoulos
0024a9d4a9
Added more debugging messages.
2014-01-11 23:19:40 +01:00
Nikos Mavrogiannopoulos
2a9d17a7bf
increased maximum name size of DTLS cipher and other occtl cleanups.
2014-01-11 22:23:10 +01:00
Nikos Mavrogiannopoulos
043355799d
Added human_addr2() which will display port number only when requested.
2014-01-11 22:12:28 +01:00
