Commit Graph

879 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
638228e284 Use brackets in DEL macro 2014-02-05 09:56:06 +01:00
Nikos Mavrogiannopoulos
eb5f78c748 seccomp will make the forbidden system calls to return an error. 2014-02-02 09:45:34 +01:00
Nikos Mavrogiannopoulos
cfc10eec81 reduced the number of allowed ioctl() to the ones used. 2014-02-02 09:44:09 +01:00
Nikos Mavrogiannopoulos
5bf791bdfa doc update 2014-02-01 19:03:33 +01:00
Nikos Mavrogiannopoulos
91ceefb1f3 Added the split-dns config option. 2014-02-01 18:59:50 +01:00
Nikos Mavrogiannopoulos
311d5ddd20 Added configuration option to send custom headers to client. 2014-02-01 18:55:27 +01:00
Nikos Mavrogiannopoulos
0ec67882c0 Added support for multiple DNS and NBNS servers.
This patch also combines ipv4-dns and ipv6-dns options
that are now handled as aliases to dns.

A side-effect of this patch is that the local keyword is no
longer supported.
2014-02-01 14:50:52 +01:00
Nikos Mavrogiannopoulos
5c49678568 doc update 2014-02-01 10:27:49 +01:00
Nikos Mavrogiannopoulos
51c0e1bee1 Added untested code to set an IPv6 on FreeBSD. 2014-02-01 10:25:41 +01:00
Nikos Mavrogiannopoulos
97c2a4428f separated linux-specific code to allow easier portability fixes. 2014-02-01 09:57:18 +01:00
Nikos Mavrogiannopoulos
16f731bd2e on systems without IPv6 support remove the IPv6 lease. 2014-02-01 09:49:10 +01:00
Nikos Mavrogiannopoulos
ea02f38a04 if the loading of default config in the new location fails, try the old default file. 2014-02-01 09:24:52 +01:00
Nikos Mavrogiannopoulos
a22b846ece use linux/types.h for __u32 2014-02-01 09:12:41 +01:00
Nikos Mavrogiannopoulos
28e5d62f3f The worker process receives the client's IPs from the main process.
That eliminates the need to read the IP address from the tun device
(which can be quite tricky to implement in a clean portable way).
2014-01-31 20:53:45 +01:00
Nikos Mavrogiannopoulos
f715cf08f0 doc update 2014-01-31 13:28:58 +01:00
Nikos Mavrogiannopoulos
798eb38eb0 remove socket and pid files prior to waiting for kill. 2014-01-31 13:28:11 +01:00
Nikos Mavrogiannopoulos
a51de1cb0c Get real-time netlink information rather than using the cache. 2014-01-30 22:15:42 +01:00
Nikos Mavrogiannopoulos
4ce8365873 updated netlink handling. 2014-01-30 20:51:00 +01:00
Nikos Mavrogiannopoulos
ab7a5623ad better error messages 2014-01-30 20:03:13 +01:00
Nikos Mavrogiannopoulos
4dfa0e560b doc update 2014-01-30 19:25:38 +01:00
Nikos Mavrogiannopoulos
313f1b67fd When not reading from a tty use getline(). 2014-01-30 19:22:02 +01:00
Nikos Mavrogiannopoulos
aeb0b40221 use etc/ocserv as config directory 2014-01-30 19:13:23 +01:00
Nikos Mavrogiannopoulos
2254ba554b Set a default password file if one is not specified in ocpasswd. 2014-01-30 19:12:02 +01:00
Nikos Mavrogiannopoulos
44cd152f02 doc update 2014-01-30 14:05:18 +01:00
Nikos Mavrogiannopoulos
6f25bf1889 ensure that our MTU discovery will not try an MTU smaller than the minimum. 2014-01-30 14:01:54 +01:00
Nikos Mavrogiannopoulos
4a1f5a1162 doc update 2014-01-30 13:56:45 +01:00
Nikos Mavrogiannopoulos
32d608a169 doc update 2014-01-30 13:56:25 +01:00
Nikos Mavrogiannopoulos
524e90351f Take into account peer's MTU values after considering the overhead. 2014-01-30 10:36:01 +01:00
Nikos Mavrogiannopoulos
7129b7b316 change default ipv6 to link-local 2014-01-30 09:43:18 +01:00
Nikos Mavrogiannopoulos
f6244539b9 set IFF_RUNNING and fail if tun interfaces cannot be brought up. 2014-01-30 04:54:26 +01:00
Nikos Mavrogiannopoulos
326bf7143a 'guess' DST address in IPv6 links 2014-01-30 04:53:00 +01:00
Nikos Mavrogiannopoulos
83b2d75a24 Corrected auto-detection of the address. 2014-01-30 03:58:56 +01:00
Nikos Mavrogiannopoulos
b80ac284a2 simpler handling of IPv6 assignment 2014-01-30 03:41:25 +01:00
Nikos Mavrogiannopoulos
2409fd3abe Revert "ping a single host in IPv6"
This reverts commit b7a4a098a3.
2014-01-30 03:37:31 +01:00
Nikos Mavrogiannopoulos
040d552f5e Revert "Lease a single IPv6."
This reverts commit a3889c9053.
2014-01-30 03:37:23 +01:00
Nikos Mavrogiannopoulos
ddfdd019c8 Revert "The D-BUS protocol transfers only a single IPv6."
This reverts commit 1f08ebc70a.
2014-01-30 03:37:12 +01:00
Nikos Mavrogiannopoulos
1f08ebc70a The D-BUS protocol transfers only a single IPv6. 2014-01-29 18:42:22 +01:00
Nikos Mavrogiannopoulos
a3889c9053 Lease a single IPv6. 2014-01-29 18:36:03 +01:00
Nikos Mavrogiannopoulos
b7a4a098a3 ping a single host in IPv6 2014-01-29 18:35:16 +01:00
Nikos Mavrogiannopoulos
ec9ee54eca Set both IPv4 and IPv6 addresses in Linux. 2014-01-29 18:29:35 +01:00
Nikos Mavrogiannopoulos
fe927da089 corrected reading of IP addresses. 2014-01-29 18:27:57 +01:00
Nikos Mavrogiannopoulos
6abcbcedd3 Use getifaddrs() to obtain the IPs of the tun device.
This is a waste of resources but it seems there is no other easy
way to obtain to IPv6 address of a tun device.
2014-01-29 17:54:58 +01:00
Nikos Mavrogiannopoulos
555994ff47 use ffff instead of FFFF for IPv6 masks 2014-01-29 16:53:22 +01:00
Nikos Mavrogiannopoulos
8a29216228 doc update 2014-01-29 15:13:33 +01:00
Nikos Mavrogiannopoulos
b5b2d5b20a Cleanups in IPv6 handling. 2014-01-29 14:31:18 +01:00
Thomas Glanzmann
885f394f95 Allow Remote Desktop Users to establish AnyConnect connections
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
2014-01-29 13:58:28 +01:00
Nikos Mavrogiannopoulos
c814f5bb59 reduced log level 2014-01-28 18:13:34 +01:00
Nikos Mavrogiannopoulos
41e8a949b3 only install DBUS and systemd files if they don't exist. 2014-01-28 18:04:38 +01:00
Nikos Mavrogiannopoulos
ec10295d9c Added two versions of systemd socket files, a standalone and a socket activate.
From the standalone is installed by default.
2014-01-28 18:01:31 +01:00
Nikos Mavrogiannopoulos
22dfa568a0 No need to install the dbus service file. 2014-01-28 17:56:37 +01:00