Nikos Mavrogiannopoulos
6334bada15
renamed urlfw to kkdcp
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
b5a0fe354f
more specific log message
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
b300177eb7
Added max-password-retries config option
...
That makes the number of retries prior to banning the IP
configurable.
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
108d34f613
Ban an IP only when the MAX_PASSWORD_TRIES attempts have been exceeded
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
1fc59e0099
gssapi: better error printing and restrict to SPNEGO
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
1459f39790
X-Need-SPNEGO renamed to X-Support-SPNEGO
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
1f128219ae
if gssapi authentication fails, switch to password auth if possible
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
06f2147155
prohibit worker from sending an auth_type of zero
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
c0ceeba0f8
Fail if authentication modules are changed on reload
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
bfeab4b015
Additional data are passed only to auth module's global_init
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
2d72c0a526
doc update
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
01ec22db27
Allow setting content-type urlfw, and allow tcp
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
ac4ca3cd70
updated documentation
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
494738dd55
Added url-fw config option
...
That allows to specify a class of URLs where, if a client
POSTS to it, the data will be forwarded to the configured server,
and the client will receive its reply.
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
41a6c25a91
use vasprintf() in cstp_printf()
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
11f43f144a
eliminated auth message upper limit
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
4bbd987525
test-gssapi: added check for gssapi authentication
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
065bcbd2ea
increased maximum message size to 2048
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
daa18cae8d
Ensure that any messages are being forwarded even on success packet
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
51ab9a97d0
only print WWW-Authenticate when there are data to print
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
a08329b398
Allow GSSAPI authentication even from GET commands
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
e865dcb354
In certificate verification separate between no certificate and verification failure
2015-02-19 11:47:20 +01:00
Kevin Cernekee and Nikos Mavrogiannopoulos
370fa01de6
gssapi: Don't include gssapi header files if !HAVE_GSSAPI
...
This fixes:
CC auth/gssapi.o
auth/gssapi.c:30:27: fatal error: gssapi/gssapi.h: No such file or directory
#include <gssapi/gssapi.h>
^
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
507d6cc502
test-pass-opt-cert: updated for enable-auth config option
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
afef74fa23
removed the certificate[optional] auth type
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
8bb0af61bc
Added GSSAPI as an additional password auth mechanism
...
That also adds the ability to support an OR composition of multiple
authentication methods. That is using the 'enable-auth' config option.
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
5e4763d229
bumped version
2015-02-18 08:12:19 +01:00
Nikos Mavrogiannopoulos
a6f6dea2cb
ip-lease: use 128 as prefix in local IP
2015-02-17 10:10:52 +01:00
Nikos Mavrogiannopoulos
579900211e
doc update
2015-02-16 23:04:17 +01:00
Nikos Mavrogiannopoulos
8d08df70cc
tests: updated for new IPv4 assignment
2015-02-16 23:03:29 +01:00
Nikos Mavrogiannopoulos
e959c8cfab
manpage: generate a DER PKCS #12 file
2015-02-16 23:02:00 +01:00
Nikos Mavrogiannopoulos
ce19dca719
avoid using the IPv4 network address as tun address, and simplify valid address checking
2015-02-16 23:00:59 +01:00
Nikos Mavrogiannopoulos
aa72455d39
doc update
2015-02-16 15:33:12 +01:00
Nikos Mavrogiannopoulos
f94276fc73
ip-lease: fixed hash value for IPv6 leases
...
This corrects the unique check for assigned IPv6 addresses.
2015-02-16 15:31:43 +01:00
Nikos Mavrogiannopoulos
ebcf2f7352
tests: fix pings to IPv6 addresses for the new tun address
2015-02-16 15:14:07 +01:00
Nikos Mavrogiannopoulos
31fb3b680f
In IPv6 use the network address + 1 as the tun address
2015-02-16 15:13:30 +01:00
Nikos Mavrogiannopoulos
683fd2ec28
radius-test: completed test
2015-02-16 13:21:14 +01:00
Nikos Mavrogiannopoulos
a2f52c58cc
full/unix-test: updated for new IP assignments
2015-02-16 13:19:22 +01:00
Nikos Mavrogiannopoulos
ad52336a14
Linux ipv6: assign route to the remote IP
2015-02-16 13:16:48 +01:00
Nikos Mavrogiannopoulos
e22a1d7f42
doc update
2015-02-15 12:23:42 +01:00
Nikos Mavrogiannopoulos
137e584538
force relative names on the socket file to allow it being accessible from main and workers
2015-02-15 12:23:39 +01:00
Nikos Mavrogiannopoulos
53b9bbe603
configure: use seccomp where it is available
2015-02-15 08:28:08 +01:00
Nikos Mavrogiannopoulos
a07be822ac
use IPV6_V6ONLY flag only when defined
2015-02-15 08:21:39 +01:00
Nikos Mavrogiannopoulos
0794a32567
use headers for clone() only when ENABLE_LINUX_NS is defined
2015-02-15 08:21:22 +01:00
Nikos Mavrogiannopoulos
f3249a70aa
doc update
2015-02-15 08:04:41 +01:00
Nikos Mavrogiannopoulos
9e3695ec15
tests: added missing file
2015-02-15 07:55:38 +01:00
Stuart Henderson and Nikos Mavrogiannopoulos
56c2d9a74a
header/macro fix for OpenBSD
...
Signed-off-by: Stuart Henderson <stu@spacehopper.org >
2015-02-14 18:53:26 +01:00
Stuart Henderson and Nikos Mavrogiannopoulos
7cb57b162b
correct byte-order for tun header
...
Signed-off-by: Stuart Henderson <stu@spacehopper.org >
2015-02-14 18:51:59 +01:00
Nikos Mavrogiannopoulos
d75c1d18a2
use writev() and readv() for tun_read/write in OpenBSD
2015-02-14 14:36:46 +01:00
Nikos Mavrogiannopoulos
9d5106995c
Handle OpenBSD's additional tun header
2015-02-14 14:22:00 +01:00
