Nikos Mavrogiannopoulos
|
700bae21f6
|
tests: use common functions in unix-test
|
2015-05-21 11:04:52 +02:00 |
|
Nikos Mavrogiannopoulos
|
c371a91736
|
corrected memset usage
|
2015-05-21 11:04:30 +02:00 |
|
Nikos Mavrogiannopoulos
|
80a925a2cf
|
avoid null pointer dereference in config parsing
|
2015-05-21 11:02:43 +02:00 |
|
Nikos Mavrogiannopoulos
|
73c9c56a01
|
check the return value of inet_pton
|
2015-05-21 10:58:46 +02:00 |
|
Nikos Mavrogiannopoulos
|
e3d21e0d30
|
tests: corrected username in pam-test
|
2015-05-20 16:16:34 +02:00 |
|
Nikos Mavrogiannopoulos
|
77c98f4534
|
tests: cleanups
|
2015-05-20 16:10:36 +02:00 |
|
Nikos Mavrogiannopoulos
|
70bb46d206
|
tests: remove the interactive flags from docker exec cmd
|
2015-05-20 16:05:09 +02:00 |
|
Nikos Mavrogiannopoulos
|
8b5f13cdc9
|
tests: added radius-test-config to tests
|
2015-05-20 16:04:41 +02:00 |
|
Nikos Mavrogiannopoulos
|
f4e9b2e698
|
tests: use common function to check for file existence
This addresses issue with "docker cp" in some systems.
|
2015-05-20 15:51:27 +02:00 |
|
Nikos Mavrogiannopoulos
|
76f2c91e6b
|
move the password counter to the label
That addresses issue with anyconnect clients which require
the name to be called password.
|
2015-05-20 13:17:18 +02:00 |
|
Nikos Mavrogiannopoulos
|
5c146055fe
|
tests: don't use ssh to obtain user information
|
2015-05-20 11:34:08 +02:00 |
|
Nikos Mavrogiannopoulos
|
7b786ed486
|
when the password label matches the message, set no message
|
2015-05-20 11:25:34 +02:00 |
|
Nikos Mavrogiannopoulos
|
75646402ee
|
PAM: improved log message in conv to include prompt
|
2015-05-20 10:04:16 +02:00 |
|
Nikos Mavrogiannopoulos
|
c60a0bce50
|
Combined password prompt and message
That is because there are clients (anyconnect) which only print
the message but not the prompt.
|
2015-05-20 10:01:25 +02:00 |
|
Nikos Mavrogiannopoulos
|
705f1f3efc
|
do not print error message when a new password is requested
|
2015-05-20 09:55:30 +02:00 |
|
Nikos Mavrogiannopoulos
|
38cc6d9260
|
doc update
|
2015-05-19 19:02:12 +02:00 |
|
Nikos Mavrogiannopoulos
|
48115f80e9
|
TODO: removed session timeout
|
2015-05-19 19:01:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
419fd1e63c
|
tests: avoid using double newlines and other updates in full-test
|
2015-05-19 19:00:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
2d386261ac
|
don't use default messages for first prompt - allow worker to set it
|
2015-05-19 18:28:01 +02:00 |
|
Nikos Mavrogiannopoulos
|
cdd5dcd9c3
|
updated for new format of msgs
|
2015-05-19 18:27:41 +02:00 |
|
Nikos Mavrogiannopoulos
|
87dcf31665
|
tests: added check for the application of radius configuration
|
2015-05-19 18:18:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
c9b45fabef
|
do not send interim-updates on init
|
2015-05-19 18:05:12 +02:00 |
|
Nikos Mavrogiannopoulos
|
27b1541c31
|
print information on the config backend used
|
2015-05-19 18:04:30 +02:00 |
|
Nikos Mavrogiannopoulos
|
f4a55660de
|
corrected bug in string expansion
|
2015-05-19 18:02:34 +02:00 |
|
Nikos Mavrogiannopoulos
|
c461d96d9e
|
tests: properly escape output
|
2015-05-19 17:12:59 +02:00 |
|
Nikos Mavrogiannopoulos
|
0c06211465
|
session-timeout immediately invalidates the session
|
2015-05-19 15:59:24 +02:00 |
|
Nikos Mavrogiannopoulos
|
e9d35493f0
|
stats-report-time and session-timeout can be set per user/group as well
|
2015-05-19 15:42:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
e9cb3b1d60
|
simplify application of radius config
|
2015-05-19 15:39:24 +02:00 |
|
Nikos Mavrogiannopoulos
|
0abc1ee2db
|
Allow overriding session-timeout from radius
|
2015-05-19 15:35:46 +02:00 |
|
Nikos Mavrogiannopoulos
|
6ff0a8fb07
|
Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
|
2015-05-19 15:07:51 +02:00 |
|
Nikos Mavrogiannopoulos
|
4dd558b0cc
|
updated radius documentation
|
2015-05-19 13:57:44 +02:00 |
|
Nikos Mavrogiannopoulos
|
a4cb90b8eb
|
cleanup in match_password_in_reply()
|
2015-05-19 13:29:43 +02:00 |
|
Nikos Mavrogiannopoulos
|
9797ccee81
|
when multiple password prompts are sent, utilize a counter to differentiate them
|
2015-05-19 13:10:26 +02:00 |
|
Nikos Mavrogiannopoulos
|
2f266e5828
|
removed deprecated field from auth_reply_msg
|
2015-05-19 11:33:32 +02:00 |
|
Nikos Mavrogiannopoulos
|
93c0819403
|
doc update
|
2015-05-19 10:38:02 +02:00 |
|
Nikos Mavrogiannopoulos
|
6cb44ec8c4
|
tests: enhanced PAM test with a second (OTP) password
|
2015-05-19 10:36:45 +02:00 |
|
Nikos Mavrogiannopoulos
|
379716efcd
|
pam: allow passing brief prompt in addition to messages
|
2015-05-19 10:09:42 +02:00 |
|
Nikos Mavrogiannopoulos
|
8a0dbb7435
|
increased timeout in main-secmod communication
|
2015-05-15 12:56:31 +02:00 |
|
Nikos Mavrogiannopoulos
|
2ed95206e2
|
simplified request handling in sec-mod
|
2015-05-14 10:22:37 +02:00 |
|
Nikos Mavrogiannopoulos
|
18ad0920ed
|
close the sec-mod fds on worker
|
2015-05-14 09:39:13 +02:00 |
|
Nikos Mavrogiannopoulos
|
9966fd578c
|
doc update
|
2015-05-14 09:35:14 +02:00 |
|
Nikos Mavrogiannopoulos
|
7086212fad
|
remove_proc: use flags instead of multiple variables
|
2015-05-13 18:10:37 +02:00 |
|
Nikos Mavrogiannopoulos
|
aeaf08491b
|
bumped version
|
2015-05-13 14:32:03 +02:00 |
|
Nikos Mavrogiannopoulos
|
8b6b83a6f6
|
when the server exits don't wait for stats from sec-mod
|
2015-05-13 14:27:27 +02:00 |
|
Nikos Mavrogiannopoulos
|
8829441e82
|
updated main_mod_fd_sync doc
|
2015-05-13 14:14:33 +02:00 |
|
Nikos Mavrogiannopoulos
|
f942dc834a
|
doc update
|
2015-05-13 14:12:17 +02:00 |
|
Nikos Mavrogiannopoulos
|
33bcfb178e
|
main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
|
2015-05-13 14:04:22 +02:00 |
|
Nikos Mavrogiannopoulos
|
accf63a9e3
|
Added more debugging messages
|
2015-05-13 13:49:16 +02:00 |
|
Nikos Mavrogiannopoulos
|
66203e1a6d
|
set cloexec on sec-mod's socket file
|
2015-05-13 11:50:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
b5e64c1569
|
tests: added more users into radius' server user file
|
2015-05-13 09:54:22 +02:00 |
|