Age | Commit message (Collapse) | Author |
|
Fix radius Framed-IP-Address
|
|
|
|
Add htonl to check if Framed-IP-Address==0xFFFFFFFE
Ignore 0xFFFFFFFE as Framed-IP-Address in DM/CoA requests
|
|
With GCC v8.x on Raspbian Buster the following warning is shown
at compile time:
...
[ 99%] Building C object accel-cmd/CMakeFiles/accel-cmd.dir/accel_cmd.c.o
/home/pi/accel-ppp/accel-cmd/accel_cmd.c: In function ‘main’:
/home/pi/accel-ppp/accel-cmd/accel_cmd.c:652:29: warning: comparison is always true due to limited range of data type [-Wtype-limits]
long_opts, &oindx)) != -1) {
^~
[100%] Linking C executable accel-cmd
[100%] Built target accel-cmd
This leads to the accel-cmd always just showing the usage
instructions rather than executing any commands.
This is because ochar is declared as a char rather than an int
so is considered to be unsigned by default. The man page says
the return value should be an int.
https://linux.die.net/man/3/getopt_long
|
|
Version number improvements
|
|
This is more efficient as its a Git build in function. If build from a non
tagged commit, the version number will be extended by the "git describe" way:
$ dpkg -I accel-ppp/build/_CPack_Packages/Linux/DEB/accel-ppp.deb | grep Vers
Version: 1.12.0-53-g7afe0f0
The version indicator shows that the last Accel-PPP release was 1.12.0 (which
was tagged) and we are now 53 commits past the 1.12.0 tag. The current commit
id is 7afe0f0 (short form).
After installation the Debian package database will show:
$ dpkg -l | grep accel
ii accel-ppp 1.12.0-53-g7afe0f0 amd64 PPtP/L2TP/PPPoE/SSTP server for Linux
Also the embedded version command will show:
$ accel-cmd -p 2005 -V
accel-cmd 1.12.0-53-g7afe0f0
Signed-off-by: Christian Poessinger <christian@poessinger.com>
|
|
Version number for Accel-PPP is already generated in CMakeLists.txt and thus
it should not be manually defined in a second place (cmake/cpack.cmake).
Reuse the version number obtained in CMakeLists.txt when building binary
packages -> single source.
Signed-off-by: Christian Poessinger <christian@poessinger.com>
|
|
|
|
If you move an interface into a namespace where there is alreay an
interface with the same index, the moved interface will get a new index
assigned to it. We need to update our data structure accordingly.
Signed-off-by: Simon Chopin <s.chopin@alphalink.fr>
|
|
If you move an interface into a namespace where there is alreay an
interface with the same index, the moved interface will get a new index
assigned to it. We need to update our data structure accordingly.
Signed-off-by: Simon Chopin <s.chopin@alphalink.fr>
|
|
The index of a given interface is an operation that highly depends on
the network namespace we're in. This patch simply cuts out a function to
get the index for a given interface name from the session initialization
code, and expose it in the ap_net structure.
This function can then be used to refresh the index when moving
interfaces around.
Signed-off-by: Simon Chopin <s.chopin@alphalink.fr>
|
|
Add global [common]max-starting option
|
|
ipoe: dhcpv4: echo back opt82 if sent by client/relay per rfc3046
|
|
|
|
usually there's no need to have per-proto limitation, since the need
of max starting limitation affects the whole server, not particular
protocol only.
|
|
sessions)"
This reverts commit 02008c74a19c538ff7d9ce643c8cd4c738886196.
|
|
sessions)"
This reverts commit 61862862a9fa24db4f16c24db1aed1f1a5f0be19.
|
|
pptp: add ip-pool & ipv6-pool config exmples
|
|
ipoe: dhcp: implement udp csum and padding per rfc1542
|
|
|
|
|
|
|
|
|
|
|
|
radius: implement jitter of accounting update interval
|
|
|
|
Add named ipv6 pools support
|
|
also, disable ipv6 pools via chap-secrets, need to find another
syntax for it, may be with comments.
|
|
|
|
default stateful ipv6 address & prefix radius attrs are per-rfc6911:
171 Delegated-IPv6-Prefix-Pool
172 Stateful-IPv6-Address-Pool
the single pool name from chap-secret file pool is shared for
ipv4/ipv6/ipv6 dp, new config syntax TBD.
per-proto pool names are still for ipv4 only, new config syntax TBD.
|
|
|
|
|
|
|
|
cpack: Add rules and requirements for Centos 8
|
|
|
|
Fix: build for Ubuntu 16, update required packages version
|
|
|
|
Added single-session-ignore-case option
|
|
ipv6: dhcpv6: fix pd gateway logging
|
|
|
|
If multisession behavior is managed by accel-ppp and Radius server
ignores the case of the User-Name attribute, it might be required to
ignore the case in accel-ppp to prevent multiple session with
different letter cases.
|
|
|
|
|
|
radius: add support for Access-Accept username
|
|
|
|
ppp/ipoe: cleanup cleck-ip support
|
|
once radius server has returned User-Name attribute in Access-Accept
packet, it'll be used for any subsequent Accounting-Request packets
instead of internal username per RFC2865 5.1
other way of just replacing session username is possible, but not
desired at the moment due potential issues with single-session modes
in case of different ppp logins / ipoe macs and same contract number
returned by radius for that accounts.
|
|
let check-ip setting from [ppp]/[ipoe] sections has prio over [common]
for compatibility with older configs.
|
|
Added protocol IPoE and SSTP to init.d description
|
|
|