Nikos Mavrogiannopoulos
7619895a25
removed server-name config option
2015-02-26 11:00:07 +01:00
Nikos Mavrogiannopoulos
410ad632b0
added sanity checks in auth methods
2015-02-24 19:15:23 +01:00
Nikos Mavrogiannopoulos
2f2f4a77d2
allow explicitly specifying the NAS identifier in radius
2015-02-24 18:59:05 +01:00
Nikos Mavrogiannopoulos
43caa1be14
radius will use the new sub-config format
2015-02-24 13:04:28 +01:00
Nikos Mavrogiannopoulos
40e96aae45
Separated accounting from authentication.
2015-02-23 15:19:44 +01:00
Nikos Mavrogiannopoulos
88e008cda3
radius: when sending accounting information include any updated IP
2015-02-23 09:34:06 +01:00
Nikos Mavrogiannopoulos
f3dc88f427
radius: improved log messages consistency
2015-02-21 08:20:35 +01:00
Nikos Mavrogiannopoulos
c1a6f4730b
Added the configure option server-name
...
If set it will be used to set the NAS_IDENTIFIER in radius.
2015-02-21 08:20:16 +01:00
Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
108d34f613
Ban an IP only when the MAX_PASSWORD_TRIES attempts have been exceeded
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
bfeab4b015
Additional data are passed only to auth module's global_init
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
11f43f144a
eliminated auth message upper limit
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
8bb0af61bc
Added GSSAPI as an additional password auth mechanism
...
That also adds the ability to support an OR composition of multiple
authentication methods. That is using the 'enable-auth' config option.
2015-02-19 11:47:20 +01:00
Nikos Mavrogiannopoulos
de846f9dd6
enforce the actual number of MAX_TRIES in authentication
2015-01-24 13:53:34 +01:00
Nikos Mavrogiannopoulos
efe61fa48e
radius: added safety checks in the parsing of Framed-IPv6-Prefix
2015-01-06 10:58:05 +01:00
Nikos Mavrogiannopoulos
a530330873
radius: use separate types for ipv4 and ipv6
2015-01-06 10:56:24 +01:00
Nikos Mavrogiannopoulos
b097d8a3ff
radius: handle Framed-IPv6-Prefix as routes to add
2015-01-01 01:22:32 +02:00
Nikos Mavrogiannopoulos
90b0ac7932
radius: added support for Framed-IPv6-Prefix
2014-12-29 20:00:45 +02:00
Nikos Mavrogiannopoulos
6d331584c1
radius: optimize "parse" of route
2014-12-14 20:55:04 +01:00
Nikos Mavrogiannopoulos
4cf2797afc
radius: use Framed-Route and Framed-IPv6-Route
...
That is read and if format is the expected, they are forwarded to client.
2014-12-14 20:37:50 +01:00
Nikos Mavrogiannopoulos
3bbee0b069
more strlcpy() related changes
2014-12-14 20:12:08 +01:00
Nikos Mavrogiannopoulos
853f7876cd
radius: increase the info sent during accounting requests
...
Based on suggestions by Niels Peen. That adds:
Calling-Station-Id in auth message, and Service-Type,
Framed-Protocol, Framed-IP-Address, Acct-Authentic,
NAS-Port-Type, Acct-Session-Time in acct messages.
2014-12-14 15:03:59 +01:00
Nikos Mavrogiannopoulos
d5a975d5e6
removed redundant checks
2014-12-14 07:30:14 +01:00
Nikos Mavrogiannopoulos
640211d8ea
simplify radius usage
2014-12-13 22:23:44 +01:00
Nikos Mavrogiannopoulos
320773e80a
Added support for radius interim updates
2014-12-10 11:18:29 +01:00
Nikos Mavrogiannopoulos
766afb591a
Added support for reading user configuration from radius.
2014-12-09 15:38:27 +01:00
Nikos Mavrogiannopoulos
2194e11b39
Added support for radius authentication
2014-12-09 10:59:18 +01:00
