Commit Graph
2147 Commits
Author SHA1 Message Date
Nikos Mavrogiannopoulos 76f2c91e6b move the password counter to the label
That addresses issue with anyconnect clients which require
the name to be called password.
2015-05-20 13:17:18 +02:00
Nikos Mavrogiannopoulos 5c146055fe tests: don't use ssh to obtain user information 2015-05-20 11:34:08 +02:00
Nikos Mavrogiannopoulos 7b786ed486 when the password label matches the message, set no message 2015-05-20 11:25:34 +02:00
Nikos Mavrogiannopoulos 75646402ee PAM: improved log message in conv to include prompt 2015-05-20 10:04:16 +02:00
Nikos Mavrogiannopoulos c60a0bce50 Combined password prompt and message
That is because there are clients (anyconnect) which only print
the message but not the prompt.
2015-05-20 10:01:25 +02:00
Nikos Mavrogiannopoulos 705f1f3efc do not print error message when a new password is requested 2015-05-20 09:55:30 +02:00
Nikos Mavrogiannopoulos 38cc6d9260 doc update 2015-05-19 19:02:12 +02:00
Nikos Mavrogiannopoulos 48115f80e9 TODO: removed session timeout 2015-05-19 19:01:38 +02:00
Nikos Mavrogiannopoulos 419fd1e63c tests: avoid using double newlines and other updates in full-test 2015-05-19 19:00:53 +02:00
Nikos Mavrogiannopoulos 2d386261ac don't use default messages for first prompt - allow worker to set it 2015-05-19 18:28:01 +02:00
Nikos Mavrogiannopoulos cdd5dcd9c3 updated for new format of msgs 2015-05-19 18:27:41 +02:00
Nikos Mavrogiannopoulos 87dcf31665 tests: added check for the application of radius configuration 2015-05-19 18:18:53 +02:00
Nikos Mavrogiannopoulos c9b45fabef do not send interim-updates on init 2015-05-19 18:05:12 +02:00
Nikos Mavrogiannopoulos 27b1541c31 print information on the config backend used 2015-05-19 18:04:30 +02:00
Nikos Mavrogiannopoulos f4a55660de corrected bug in string expansion 2015-05-19 18:02:34 +02:00
Nikos Mavrogiannopoulos c461d96d9e tests: properly escape output 2015-05-19 17:12:59 +02:00
Nikos Mavrogiannopoulos 0c06211465 session-timeout immediately invalidates the session 2015-05-19 15:59:24 +02:00
Nikos Mavrogiannopoulos e9d35493f0 stats-report-time and session-timeout can be set per user/group as well 2015-05-19 15:42:53 +02:00
Nikos Mavrogiannopoulos e9cb3b1d60 simplify application of radius config 2015-05-19 15:39:24 +02:00
Nikos Mavrogiannopoulos 0abc1ee2db Allow overriding session-timeout from radius 2015-05-19 15:35:46 +02:00
Nikos Mavrogiannopoulos 6ff0a8fb07 Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
2015-05-19 15:07:51 +02:00
Nikos Mavrogiannopoulos 4dd558b0cc updated radius documentation 2015-05-19 13:57:44 +02:00
Nikos Mavrogiannopoulos a4cb90b8eb cleanup in match_password_in_reply() 2015-05-19 13:29:43 +02:00
Nikos Mavrogiannopoulos 9797ccee81 when multiple password prompts are sent, utilize a counter to differentiate them 2015-05-19 13:10:26 +02:00
Nikos Mavrogiannopoulos 2f266e5828 removed deprecated field from auth_reply_msg 2015-05-19 11:33:32 +02:00
Nikos Mavrogiannopoulos 93c0819403 doc update 2015-05-19 10:38:02 +02:00
Nikos Mavrogiannopoulos 6cb44ec8c4 tests: enhanced PAM test with a second (OTP) password 2015-05-19 10:36:45 +02:00
Nikos Mavrogiannopoulos 379716efcd pam: allow passing brief prompt in addition to messages 2015-05-19 10:09:42 +02:00
Nikos Mavrogiannopoulos 8a0dbb7435 increased timeout in main-secmod communication 2015-05-15 12:56:31 +02:00
Nikos Mavrogiannopoulos 2ed95206e2 simplified request handling in sec-mod 2015-05-14 10:22:37 +02:00
Nikos Mavrogiannopoulos 18ad0920ed close the sec-mod fds on worker 2015-05-14 09:39:13 +02:00
Nikos Mavrogiannopoulos 9966fd578c doc update 2015-05-14 09:35:14 +02:00
Nikos Mavrogiannopoulos 7086212fad remove_proc: use flags instead of multiple variables 2015-05-13 18:10:37 +02:00
Nikos Mavrogiannopoulos aeaf08491b bumped version 2015-05-13 14:32:03 +02:00
Nikos Mavrogiannopoulos 8b6b83a6f6 when the server exits don't wait for stats from sec-mod 2015-05-13 14:27:27 +02:00
Nikos Mavrogiannopoulos 8829441e82 updated main_mod_fd_sync doc 2015-05-13 14:14:33 +02:00
Nikos Mavrogiannopoulos f942dc834a doc update 2015-05-13 14:12:17 +02:00
Nikos Mavrogiannopoulos 33bcfb178e main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
2015-05-13 14:04:22 +02:00
Nikos Mavrogiannopoulos accf63a9e3 Added more debugging messages 2015-05-13 13:49:16 +02:00
Nikos Mavrogiannopoulos 66203e1a6d set cloexec on sec-mod's socket file 2015-05-13 11:50:38 +02:00
Nikos Mavrogiannopoulos b5e64c1569 tests: added more users into radius' server user file 2015-05-13 09:54:22 +02:00
Nikos Mavrogiannopoulos 691d9d426a tests: updated ipv6 addresses in kerberos and pam tests 2015-05-12 11:28:41 +02:00
Nikos Mavrogiannopoulos b341880d05 export IPV6_PREFIX to scripts 2015-05-11 19:32:46 +02:00
Nikos Mavrogiannopoulos 046d1e65ea set ipv6 prefix only if it is set 2015-05-11 19:25:45 +02:00
Nikos Mavrogiannopoulos 3cc5223842 tests: updated IPv6 addresses 2015-05-11 16:14:38 +02:00
Nikos Mavrogiannopoulos 69181d0cf3 use an 127-bit prefix for IPv6 leases 2015-05-11 16:10:38 +02:00
Nikos Mavrogiannopoulos 308d0a162e tests: updated radius-test to detect disconnect in certificate auth 2015-05-11 14:27:04 +02:00
Nikos Mavrogiannopoulos df5a67b5c7 radius: set NAS_PORT on accounting requests 2015-05-11 14:26:58 +02:00
Nikos Mavrogiannopoulos 9a05edd2ec radius: corrected the byte ordering of NAS_IP_ADDRESS 2015-05-11 14:26:49 +02:00
Nikos Mavrogiannopoulos 43d174980d tests: check whether the value set in radius' NAS-IP-Address is not invalid 2015-05-11 14:26:49 +02:00