Commit Graph

2231 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
0c06211465 session-timeout immediately invalidates the session 2015-05-19 15:59:24 +02:00
Nikos Mavrogiannopoulos
e9d35493f0 stats-report-time and session-timeout can be set per user/group as well 2015-05-19 15:42:53 +02:00
Nikos Mavrogiannopoulos
e9cb3b1d60 simplify application of radius config 2015-05-19 15:39:24 +02:00
Nikos Mavrogiannopoulos
0abc1ee2db Allow overriding session-timeout from radius 2015-05-19 15:35:46 +02:00
Nikos Mavrogiannopoulos
6ff0a8fb07 Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
2015-05-19 15:07:51 +02:00
Nikos Mavrogiannopoulos
4dd558b0cc updated radius documentation 2015-05-19 13:57:44 +02:00
Nikos Mavrogiannopoulos
a4cb90b8eb cleanup in match_password_in_reply() 2015-05-19 13:29:43 +02:00
Nikos Mavrogiannopoulos
9797ccee81 when multiple password prompts are sent, utilize a counter to differentiate them 2015-05-19 13:10:26 +02:00
Nikos Mavrogiannopoulos
2f266e5828 removed deprecated field from auth_reply_msg 2015-05-19 11:33:32 +02:00
Nikos Mavrogiannopoulos
93c0819403 doc update 2015-05-19 10:38:02 +02:00
Nikos Mavrogiannopoulos
6cb44ec8c4 tests: enhanced PAM test with a second (OTP) password 2015-05-19 10:36:45 +02:00
Nikos Mavrogiannopoulos
379716efcd pam: allow passing brief prompt in addition to messages 2015-05-19 10:09:42 +02:00
Nikos Mavrogiannopoulos
8a0dbb7435 increased timeout in main-secmod communication 2015-05-15 12:56:31 +02:00
Nikos Mavrogiannopoulos
2ed95206e2 simplified request handling in sec-mod 2015-05-14 10:22:37 +02:00
Nikos Mavrogiannopoulos
18ad0920ed close the sec-mod fds on worker 2015-05-14 09:39:13 +02:00
Nikos Mavrogiannopoulos
9966fd578c doc update 2015-05-14 09:35:14 +02:00
Nikos Mavrogiannopoulos
7086212fad remove_proc: use flags instead of multiple variables 2015-05-13 18:10:37 +02:00
Nikos Mavrogiannopoulos
aeaf08491b bumped version 2015-05-13 14:32:03 +02:00
Nikos Mavrogiannopoulos
8b6b83a6f6 when the server exits don't wait for stats from sec-mod 2015-05-13 14:27:27 +02:00
Nikos Mavrogiannopoulos
8829441e82 updated main_mod_fd_sync doc 2015-05-13 14:14:33 +02:00
Nikos Mavrogiannopoulos
f942dc834a doc update 2015-05-13 14:12:17 +02:00
Nikos Mavrogiannopoulos
33bcfb178e main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
2015-05-13 14:04:22 +02:00
Nikos Mavrogiannopoulos
accf63a9e3 Added more debugging messages 2015-05-13 13:49:16 +02:00
Nikos Mavrogiannopoulos
66203e1a6d set cloexec on sec-mod's socket file 2015-05-13 11:50:38 +02:00
Nikos Mavrogiannopoulos
b5e64c1569 tests: added more users into radius' server user file 2015-05-13 09:54:22 +02:00
Nikos Mavrogiannopoulos
691d9d426a tests: updated ipv6 addresses in kerberos and pam tests 2015-05-12 11:28:41 +02:00
Nikos Mavrogiannopoulos
b341880d05 export IPV6_PREFIX to scripts 2015-05-11 19:32:46 +02:00
Nikos Mavrogiannopoulos
046d1e65ea set ipv6 prefix only if it is set 2015-05-11 19:25:45 +02:00
Nikos Mavrogiannopoulos
3cc5223842 tests: updated IPv6 addresses 2015-05-11 16:14:38 +02:00
Nikos Mavrogiannopoulos
69181d0cf3 use an 127-bit prefix for IPv6 leases 2015-05-11 16:10:38 +02:00
Nikos Mavrogiannopoulos
308d0a162e tests: updated radius-test to detect disconnect in certificate auth 2015-05-11 14:27:04 +02:00
Nikos Mavrogiannopoulos
df5a67b5c7 radius: set NAS_PORT on accounting requests 2015-05-11 14:26:58 +02:00
Nikos Mavrogiannopoulos
9a05edd2ec radius: corrected the byte ordering of NAS_IP_ADDRESS 2015-05-11 14:26:49 +02:00
Nikos Mavrogiannopoulos
43d174980d tests: check whether the value set in radius' NAS-IP-Address is not invalid 2015-05-11 14:26:49 +02:00
Nikos Mavrogiannopoulos
18134a87d5 radius: advertise the correct NAS IP in accounting messages 2015-05-11 14:26:42 +02:00
Nikos Mavrogiannopoulos
cc04bad753 set close-on-exec flag in sec-mod fds 2015-05-11 14:26:25 +02:00
Nikos Mavrogiannopoulos
45d380ccd9 corrected typos in IPV6 env variable 2015-05-11 14:26:10 +02:00
Nikos Mavrogiannopoulos
519ce111a5 increased MAX_MSG_SIZE 2015-05-11 14:26:05 +02:00
Nikos Mavrogiannopoulos
e450b5a259 enforce more timeouts in sec-mod main communication 2015-05-11 14:25:58 +02:00
Nikos Mavrogiannopoulos
d1d83d909c sec-mod: eliminated redundant parameters 2015-05-11 14:25:51 +02:00
Nikos Mavrogiannopoulos
10dcf1a82d added sanity checks in commands exchanged from main with sec-mod 2015-05-11 14:25:39 +02:00
Nikos Mavrogiannopoulos
bbbf6e3467 radius: distinguish more disconnect codes 2015-05-11 14:25:31 +02:00
Nikos Mavrogiannopoulos
4c29de105a worker: introduce a minimum interval below which no stats will be sent 2015-05-11 14:25:25 +02:00
Nikos Mavrogiannopoulos
ad9e3da777 radius: notify of disconnect timeout reason 2015-05-11 14:25:20 +02:00
Nikos Mavrogiannopoulos
5e6d15db45 oc_recvfrom_at: use correct packet type for IPv6 data 2015-05-11 14:25:13 +02:00
Nikos Mavrogiannopoulos
da44c28a01 more files to ignore 2015-05-11 14:24:28 +02:00
Nikos Mavrogiannopoulos
020138d219 radius: use explicit sizes when setting NAS address 2015-05-11 14:20:15 +02:00
Nikos Mavrogiannopoulos
87a3fbf18e updated ipv6 MTU discovery 2015-05-11 14:20:08 +02:00
Nikos Mavrogiannopoulos
f2e5e7e441 oc_recvfrom_at: fixed discovery of our IPv6 address 2015-05-11 14:20:00 +02:00
Nikos Mavrogiannopoulos
a80a07fa53 added MTU discovery and adjustment in IPv6 2015-05-11 14:19:53 +02:00