Nikos Mavrogiannopoulos and Nikos Mavrogiannopoulos
4755ee48c5
Added the select-group and auto-select-group config options.
...
These options allow to prompt the user for a group prior to login.
That in addition enhances the password file format and multiple groups
can be specified on a comma separated list, as:
user:group1,group2,group3:$5$encodedpassword
2014-05-19 18:25:25 +02:00
Nikos Mavrogiannopoulos
0f0f96ef5c
sample.config: comment out the occtl-socket-file.
2014-05-17 08:47:27 +02:00
Nikos Mavrogiannopoulos
b25deaf742
Updated authentication state and design figures.
2014-05-14 14:50:03 +02:00
Nikos Mavrogiannopoulos
788560b9ce
Added default-user-config and default-group-config configuration options.
...
These allow setting a configuration file that will be loaded if a
user-specific or group-specific configuration file isn't found.
2014-05-14 13:27:51 +02:00
Nikos Mavrogiannopoulos
9434334918
updated sample.config
2014-05-11 14:23:43 +02:00
Nikos Mavrogiannopoulos
d6583945f9
Added the STATS_DURATION script environment variable.
...
This variable reports the duration of the session in seconds.
2014-05-04 11:20:32 +02:00
Nikos Mavrogiannopoulos
593ce2c9fa
sample config update
2014-05-04 11:13:44 +02:00
Nikos Mavrogiannopoulos
4598a1b53b
updated example script to account for STATS_BYTES variables.
2014-04-28 17:40:00 +02:00
Nikos Mavrogiannopoulos
8e73f98502
changed the default DPD time to 90 seconds, to prevent UDP port from changing in several NATs.
2014-04-19 08:30:10 +02:00
Nikos Mavrogiannopoulos
0b9c6ff633
Added diagram with authentication state machine.
2014-03-25 13:49:11 +01:00
Nikos Mavrogiannopoulos
35c46d05c5
Do not set the output-buffer in the default configuration.
2014-03-25 11:25:42 +01:00
Nikos Mavrogiannopoulos
de1f63605b
updated sample
2014-02-22 12:54:40 +01:00
Nikos Mavrogiannopoulos
faf0a7133b
doc update
2014-02-17 22:22:07 +01:00
Nikos Mavrogiannopoulos
882c37b17a
Added profile.xml to the distributed files
2014-02-17 15:36:33 +01:00
Nikos Mavrogiannopoulos
6d8841cae7
sample.conf update
2014-02-12 11:05:14 +01:00
Nikos Mavrogiannopoulos
5bf791bdfa
doc update
2014-02-01 19:03:33 +01:00
Nikos Mavrogiannopoulos
0ec67882c0
Added support for multiple DNS and NBNS servers.
...
This patch also combines ipv4-dns and ipv6-dns options
that are now handled as aliases to dns.
A side-effect of this patch is that the local keyword is no
longer supported.
2014-02-01 14:50:52 +01:00
Nikos Mavrogiannopoulos
7129b7b316
change default ipv6 to link-local
2014-01-30 09:43:18 +01:00
Nikos Mavrogiannopoulos
8a29216228
doc update
2014-01-29 15:13:33 +01:00
Thomas Glanzmann and Nikos Mavrogiannopoulos
885f394f95
Allow Remote Desktop Users to establish AnyConnect connections
...
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com >
2014-01-29 13:58:28 +01:00
Nikos Mavrogiannopoulos
41e8a949b3
only install DBUS and systemd files if they don't exist.
2014-01-28 18:04:38 +01:00
Nikos Mavrogiannopoulos
ec10295d9c
Added two versions of systemd socket files, a standalone and a socket activate.
...
From the standalone is installed by default.
2014-01-28 18:01:31 +01:00
Nikos Mavrogiannopoulos
22dfa568a0
No need to install the dbus service file.
2014-01-28 17:56:37 +01:00
Nikos Mavrogiannopoulos
b1af6f2829
enabling cisco-client-compat allows 'stealing' of processes.
...
This change puts a proc_st that its client has terminated to a "zombie"
state. That state will allow a client that connects later using the
same TLS session ID to reclaim it. That way clients that try to authenticate
by sending their credentials in different sessions can still authenticate with
ocserv. That however puts more trust to worker processes (as the main
process has no way of telling whether a TLS session is certainly
resumed).
2014-01-18 15:06:10 +01:00
Nikos Mavrogiannopoulos
4d09a8612d
systemd file installation is optional
2014-01-11 14:49:27 +01:00
Nikos Mavrogiannopoulos
0eef3bd5be
Added occtl.8
2014-01-11 13:27:53 +01:00
Nikos Mavrogiannopoulos
7a7a44099d
Added more conservative priority strings.
2014-01-10 10:50:37 +01:00
Nikos Mavrogiannopoulos
9079e2b67a
Added configuration option use-dbus to allow disabling D-BUS usage.
2014-01-09 21:32:24 +01:00
Nikos Mavrogiannopoulos
8485b727d5
install D-BUS and systemd files.
2014-01-08 16:47:30 +01:00
Nikos Mavrogiannopoulos
1d697285e8
Added example systemd socket and service files.
2014-01-06 12:43:23 +01:00
Nikos Mavrogiannopoulos
c6a08db6db
Added support for cgroups
2013-12-10 11:07:08 +01:00
Nikos Mavrogiannopoulos
b21f05df06
Allow setting directly the IP_TOS from net-priority.
2013-12-09 22:59:44 +01:00
Nikos Mavrogiannopoulos
6cb553e9a8
Added the net-priority configuration option.
...
That option allows setting the protocol-defined priority (via SO_PRIORITY)
for the UDP and TCP sockets, per user/group or globally.
2013-12-09 14:40:55 +01:00
Nikos Mavrogiannopoulos
e08f70987a
Added the --http-debug option to ocserv to avoid printing full HTTP messages to normal debug mode.
2013-11-16 17:33:50 +01:00
Nikos Mavrogiannopoulos
504737b378
remove usage of wondershaper
2013-11-09 09:57:17 +01:00
Nikos Mavrogiannopoulos
615e16cc41
count bandwidth in kb/sec to avoid overflows on high bandwidth.
2013-11-05 20:32:23 +01:00
Nikos Mavrogiannopoulos
2f5141b00f
Added directives to allow bandwidth limitation.
2013-11-03 17:06:02 +01:00
Nikos Mavrogiannopoulos
7ac0cfbb14
doc update
2013-10-29 22:05:11 +01:00
Nikos Mavrogiannopoulos
f607b6dad4
doc update
2013-10-29 21:49:39 +01:00
Nikos Mavrogiannopoulos
3c583e3a35
Added the 'iroute' directive to allow routes set on server.
2013-10-29 11:37:57 +01:00
Nikos Mavrogiannopoulos
30f0e93e70
Added the ipv6-prefix configuration option
2013-10-29 10:01:53 +01:00
Nikos Mavrogiannopoulos
00554b2f28
Allow loading additional configuration files per user or per group.
...
The directives currently allowed are: ipv4/6_dns and route.
2013-10-28 11:43:05 +01:00
Nikos Mavrogiannopoulos
988116bbeb
Added config options 'mtu' and 'output-buffer'.
2013-10-20 17:45:51 +02:00
Nikos Mavrogiannopoulos
c6d1e952da
doc update
2013-08-28 21:13:09 +03:00
Mike Miller and Nikos Mavrogiannopoulos
9d4bea82dd
Add autogen search path to work when building out of the source tree
2013-07-23 21:34:13 +02:00
Nikos Mavrogiannopoulos
2af67c4aff
Added decoder for HTML-encoded and URL-encoded passwords and usernames.
...
This prevents special characters from not being recognized. Reported by P.H.Vos.
Also updated gnulib and added c-strncasecmp
2013-07-10 16:09:56 +02:00
Nikos Mavrogiannopoulos
58fcdd0486
use existing files
2013-07-07 21:17:41 +02:00
Nikos Mavrogiannopoulos
c4183d358e
cookie-db no longer exists.
2013-07-01 13:59:30 +02:00
Nikos Mavrogiannopoulos
e7aa89dc96
document way to force PFS
2013-06-27 17:58:48 +02:00
Nikos Mavrogiannopoulos
e91fca55b4
autogen'ed files update
2013-06-26 16:28:52 +02:00
