Nikos Mavrogiannopoulos
|
c60a0bce50
|
Combined password prompt and message
That is because there are clients (anyconnect) which only print
the message but not the prompt.
|
2015-05-20 10:01:25 +02:00 |
|
Nikos Mavrogiannopoulos
|
705f1f3efc
|
do not print error message when a new password is requested
|
2015-05-20 09:55:30 +02:00 |
|
Nikos Mavrogiannopoulos
|
38cc6d9260
|
doc update
|
2015-05-19 19:02:12 +02:00 |
|
Nikos Mavrogiannopoulos
|
48115f80e9
|
TODO: removed session timeout
|
2015-05-19 19:01:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
419fd1e63c
|
tests: avoid using double newlines and other updates in full-test
|
2015-05-19 19:00:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
2d386261ac
|
don't use default messages for first prompt - allow worker to set it
|
2015-05-19 18:28:01 +02:00 |
|
Nikos Mavrogiannopoulos
|
cdd5dcd9c3
|
updated for new format of msgs
|
2015-05-19 18:27:41 +02:00 |
|
Nikos Mavrogiannopoulos
|
87dcf31665
|
tests: added check for the application of radius configuration
|
2015-05-19 18:18:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
c9b45fabef
|
do not send interim-updates on init
|
2015-05-19 18:05:12 +02:00 |
|
Nikos Mavrogiannopoulos
|
27b1541c31
|
print information on the config backend used
|
2015-05-19 18:04:30 +02:00 |
|
Nikos Mavrogiannopoulos
|
f4a55660de
|
corrected bug in string expansion
|
2015-05-19 18:02:34 +02:00 |
|
Nikos Mavrogiannopoulos
|
c461d96d9e
|
tests: properly escape output
|
2015-05-19 17:12:59 +02:00 |
|
Nikos Mavrogiannopoulos
|
0c06211465
|
session-timeout immediately invalidates the session
|
2015-05-19 15:59:24 +02:00 |
|
Nikos Mavrogiannopoulos
|
e9d35493f0
|
stats-report-time and session-timeout can be set per user/group as well
|
2015-05-19 15:42:53 +02:00 |
|
Nikos Mavrogiannopoulos
|
e9cb3b1d60
|
simplify application of radius config
|
2015-05-19 15:39:24 +02:00 |
|
Nikos Mavrogiannopoulos
|
0abc1ee2db
|
Allow overriding session-timeout from radius
|
2015-05-19 15:35:46 +02:00 |
|
Nikos Mavrogiannopoulos
|
6ff0a8fb07
|
Introduced session-timeout option
That allows to set the maximum number of seconds a session can be
active.
|
2015-05-19 15:07:51 +02:00 |
|
Nikos Mavrogiannopoulos
|
4dd558b0cc
|
updated radius documentation
|
2015-05-19 13:57:44 +02:00 |
|
Nikos Mavrogiannopoulos
|
a4cb90b8eb
|
cleanup in match_password_in_reply()
|
2015-05-19 13:29:43 +02:00 |
|
Nikos Mavrogiannopoulos
|
9797ccee81
|
when multiple password prompts are sent, utilize a counter to differentiate them
|
2015-05-19 13:10:26 +02:00 |
|
Nikos Mavrogiannopoulos
|
2f266e5828
|
removed deprecated field from auth_reply_msg
|
2015-05-19 11:33:32 +02:00 |
|
Nikos Mavrogiannopoulos
|
93c0819403
|
doc update
|
2015-05-19 10:38:02 +02:00 |
|
Nikos Mavrogiannopoulos
|
6cb44ec8c4
|
tests: enhanced PAM test with a second (OTP) password
|
2015-05-19 10:36:45 +02:00 |
|
Nikos Mavrogiannopoulos
|
379716efcd
|
pam: allow passing brief prompt in addition to messages
|
2015-05-19 10:09:42 +02:00 |
|
Nikos Mavrogiannopoulos
|
8a0dbb7435
|
increased timeout in main-secmod communication
|
2015-05-15 12:56:31 +02:00 |
|
Nikos Mavrogiannopoulos
|
2ed95206e2
|
simplified request handling in sec-mod
|
2015-05-14 10:22:37 +02:00 |
|
Nikos Mavrogiannopoulos
|
18ad0920ed
|
close the sec-mod fds on worker
|
2015-05-14 09:39:13 +02:00 |
|
Nikos Mavrogiannopoulos
|
9966fd578c
|
doc update
|
2015-05-14 09:35:14 +02:00 |
|
Nikos Mavrogiannopoulos
|
7086212fad
|
remove_proc: use flags instead of multiple variables
|
2015-05-13 18:10:37 +02:00 |
|
Nikos Mavrogiannopoulos
|
aeaf08491b
|
bumped version
|
2015-05-13 14:32:03 +02:00 |
|
Nikos Mavrogiannopoulos
|
8b6b83a6f6
|
when the server exits don't wait for stats from sec-mod
|
2015-05-13 14:27:27 +02:00 |
|
Nikos Mavrogiannopoulos
|
8829441e82
|
updated main_mod_fd_sync doc
|
2015-05-13 14:14:33 +02:00 |
|
Nikos Mavrogiannopoulos
|
f942dc834a
|
doc update
|
2015-05-13 14:12:17 +02:00 |
|
Nikos Mavrogiannopoulos
|
33bcfb178e
|
main: use two sockets to communicate with sec-mod
That allows to have a reliable synchronous socket, and
a socket where messages are sent and received asynchronously.
|
2015-05-13 14:04:22 +02:00 |
|
Nikos Mavrogiannopoulos
|
accf63a9e3
|
Added more debugging messages
|
2015-05-13 13:49:16 +02:00 |
|
Nikos Mavrogiannopoulos
|
66203e1a6d
|
set cloexec on sec-mod's socket file
|
2015-05-13 11:50:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
b5e64c1569
|
tests: added more users into radius' server user file
|
2015-05-13 09:54:22 +02:00 |
|
Nikos Mavrogiannopoulos
|
691d9d426a
|
tests: updated ipv6 addresses in kerberos and pam tests
|
2015-05-12 11:28:41 +02:00 |
|
Nikos Mavrogiannopoulos
|
b341880d05
|
export IPV6_PREFIX to scripts
|
2015-05-11 19:32:46 +02:00 |
|
Nikos Mavrogiannopoulos
|
046d1e65ea
|
set ipv6 prefix only if it is set
|
2015-05-11 19:25:45 +02:00 |
|
Nikos Mavrogiannopoulos
|
3cc5223842
|
tests: updated IPv6 addresses
|
2015-05-11 16:14:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
69181d0cf3
|
use an 127-bit prefix for IPv6 leases
|
2015-05-11 16:10:38 +02:00 |
|
Nikos Mavrogiannopoulos
|
308d0a162e
|
tests: updated radius-test to detect disconnect in certificate auth
|
2015-05-11 14:27:04 +02:00 |
|
Nikos Mavrogiannopoulos
|
df5a67b5c7
|
radius: set NAS_PORT on accounting requests
|
2015-05-11 14:26:58 +02:00 |
|
Nikos Mavrogiannopoulos
|
9a05edd2ec
|
radius: corrected the byte ordering of NAS_IP_ADDRESS
|
2015-05-11 14:26:49 +02:00 |
|
Nikos Mavrogiannopoulos
|
43d174980d
|
tests: check whether the value set in radius' NAS-IP-Address is not invalid
|
2015-05-11 14:26:49 +02:00 |
|
Nikos Mavrogiannopoulos
|
18134a87d5
|
radius: advertise the correct NAS IP in accounting messages
|
2015-05-11 14:26:42 +02:00 |
|
Nikos Mavrogiannopoulos
|
cc04bad753
|
set close-on-exec flag in sec-mod fds
|
2015-05-11 14:26:25 +02:00 |
|
Nikos Mavrogiannopoulos
|
45d380ccd9
|
corrected typos in IPV6 env variable
|
2015-05-11 14:26:10 +02:00 |
|
Nikos Mavrogiannopoulos
|
519ce111a5
|
increased MAX_MSG_SIZE
|
2015-05-11 14:26:05 +02:00 |
|