Commit Graph

2053 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
73c9c56a01 check the return value of inet_pton 2015-05-21 10:58:46 +02:00
Nikos Mavrogiannopoulos
e3d21e0d30 tests: corrected username in pam-test 2015-05-20 16:16:34 +02:00
Nikos Mavrogiannopoulos
77c98f4534 tests: cleanups 2015-05-20 16:10:36 +02:00
Nikos Mavrogiannopoulos
70bb46d206 tests: remove the interactive flags from docker exec cmd 2015-05-20 16:05:09 +02:00
Nikos Mavrogiannopoulos
8b5f13cdc9 tests: added radius-test-config to tests 2015-05-20 16:04:41 +02:00
Nikos Mavrogiannopoulos
f4e9b2e698 tests: use common function to check for file existence
This addresses issue with "docker cp" in some systems.
2015-05-20 15:51:27 +02:00
Nikos Mavrogiannopoulos
76f2c91e6b move the password counter to the label
That addresses issue with anyconnect clients which require
the name to be called password.
2015-05-20 13:17:18 +02:00
Nikos Mavrogiannopoulos
5c146055fe tests: don't use ssh to obtain user information 2015-05-20 11:34:08 +02:00
Nikos Mavrogiannopoulos
7b786ed486 when the password label matches the message, set no message 2015-05-20 11:25:34 +02:00
Nikos Mavrogiannopoulos
75646402ee PAM: improved log message in conv to include prompt 2015-05-20 10:04:16 +02:00
Nikos Mavrogiannopoulos
c60a0bce50 Combined password prompt and message
That is because there are clients (anyconnect) which only print
the message but not the prompt.
2015-05-20 10:01:25 +02:00
Nikos Mavrogiannopoulos
705f1f3efc do not print error message when a new password is requested 2015-05-20 09:55:30 +02:00
Nikos Mavrogiannopoulos
38cc6d9260 doc update 2015-05-19 19:02:12 +02:00
Nikos Mavrogiannopoulos
48115f80e9 TODO: removed session timeout 2015-05-19 19:01:38 +02:00
Nikos Mavrogiannopoulos
419fd1e63c tests: avoid using double newlines and other updates in full-test 2015-05-19 19:00:53 +02:00
Nikos Mavrogiannopoulos
2d386261ac don't use default messages for first prompt - allow worker to set it 2015-05-19 18:28:01 +02:00
Nikos Mavrogiannopoulos
cdd5dcd9c3 updated for new format of msgs 2015-05-19 18:27:41 +02:00
Nikos Mavrogiannopoulos
87dcf31665 tests: added check for the application of radius configuration 2015-05-19 18:18:53 +02:00
Nikos Mavrogiannopoulos
c9b45fabef do not send interim-updates on init 2015-05-19 18:05:12 +02:00
Nikos Mavrogiannopoulos
27b1541c31 print information on the config backend used 2015-05-19 18:04:30 +02:00
Nikos Mavrogiannopoulos
f4a55660de corrected bug in string expansion 2015-05-19 18:02:34 +02:00
Nikos Mavrogiannopoulos
c461d96d9e tests: properly escape output 2015-05-19 17:12:59 +02:00
Nikos Mavrogiannopoulos
0c06211465 session-timeout immediately invalidates the session 2015-05-19 15:59:24 +02:00
Nikos Mavrogiannopoulos
e9d35493f0 stats-report-time and session-timeout can be set per user/group as well 2015-05-19 15:42:53 +02:00
Nikos Mavrogiannopoulos
e9cb3b1d60 simplify application of radius config 2015-05-19 15:39:24 +02:00
Nikos Mavrogiannopoulos
0abc1ee2db Allow overriding session-timeout from radius 2015-05-19 15:35:46 +02:00
Nikos Mavrogiannopoulos
6ff0a8fb07 Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
2015-05-19 15:07:51 +02:00
Nikos Mavrogiannopoulos
4dd558b0cc updated radius documentation 2015-05-19 13:57:44 +02:00
Nikos Mavrogiannopoulos
a4cb90b8eb cleanup in match_password_in_reply() 2015-05-19 13:29:43 +02:00
Nikos Mavrogiannopoulos
9797ccee81 when multiple password prompts are sent, utilize a counter to differentiate them 2015-05-19 13:10:26 +02:00
Nikos Mavrogiannopoulos
2f266e5828 removed deprecated field from auth_reply_msg 2015-05-19 11:33:32 +02:00
Nikos Mavrogiannopoulos
93c0819403 doc update 2015-05-19 10:38:02 +02:00
Nikos Mavrogiannopoulos
6cb44ec8c4 tests: enhanced PAM test with a second (OTP) password 2015-05-19 10:36:45 +02:00
Nikos Mavrogiannopoulos
379716efcd pam: allow passing brief prompt in addition to messages 2015-05-19 10:09:42 +02:00
Nikos Mavrogiannopoulos
8a0dbb7435 increased timeout in main-secmod communication 2015-05-15 12:56:31 +02:00
Nikos Mavrogiannopoulos
2ed95206e2 simplified request handling in sec-mod 2015-05-14 10:22:37 +02:00
Nikos Mavrogiannopoulos
18ad0920ed close the sec-mod fds on worker 2015-05-14 09:39:13 +02:00
Nikos Mavrogiannopoulos
9966fd578c doc update 2015-05-14 09:35:14 +02:00
Nikos Mavrogiannopoulos
7086212fad remove_proc: use flags instead of multiple variables 2015-05-13 18:10:37 +02:00
Nikos Mavrogiannopoulos
aeaf08491b bumped version 2015-05-13 14:32:03 +02:00
Nikos Mavrogiannopoulos
8b6b83a6f6 when the server exits don't wait for stats from sec-mod 2015-05-13 14:27:27 +02:00
Nikos Mavrogiannopoulos
8829441e82 updated main_mod_fd_sync doc 2015-05-13 14:14:33 +02:00
Nikos Mavrogiannopoulos
f942dc834a doc update 2015-05-13 14:12:17 +02:00
Nikos Mavrogiannopoulos
33bcfb178e main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
2015-05-13 14:04:22 +02:00
Nikos Mavrogiannopoulos
accf63a9e3 Added more debugging messages 2015-05-13 13:49:16 +02:00
Nikos Mavrogiannopoulos
66203e1a6d set cloexec on sec-mod's socket file 2015-05-13 11:50:38 +02:00
Nikos Mavrogiannopoulos
b5e64c1569 tests: added more users into radius' server user file 2015-05-13 09:54:22 +02:00
Nikos Mavrogiannopoulos
691d9d426a tests: updated ipv6 addresses in kerberos and pam tests 2015-05-12 11:28:41 +02:00
Nikos Mavrogiannopoulos
b341880d05 export IPV6_PREFIX to scripts 2015-05-11 19:32:46 +02:00
Nikos Mavrogiannopoulos
046d1e65ea set ipv6 prefix only if it is set 2015-05-11 19:25:45 +02:00