summaryrefslogtreecommitdiff
path: root/accel-pppd
AgeCommit message (Collapse)Author
2018-10-26backup: make ap_session_backup.h self-containedGuillaume Nault
We need to include <netinet/in.h> to define 'struct in6_addr' and <stdint.h> for 'uint8_t'. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-10-26Merge pull request #56 from themiron/addr-setup-fixxebd
fix gateway address setup fail due memory corruption
2018-10-25fix gateway address setup fail due memory corruptionVladislav Grishenko
log: libnetlink: RTNETLINK answers: Invalid argument ppp0: f7bb00a79ef667d2: failed to set IPv4 address: Invalid argument ipaddr_add_peer() called only with mask equeal 0 or 32, but w/o zero-allocated structs it contans garbage in some cases. so, instead ipaddr_add() was called with wrong mask value. also, init chap-secrets mask for the same reason.
2018-10-25sstp: disable ciphers renegotiation (CVE-2009-3555)Vladislav Grishenko
2018-10-25sstp: improve openssl 1.1.x compatibilityVladislav Grishenko
2018-10-23cli: add network namespace column in "show sessions"Guillaume Nault
Define a new column, called "netns", that prints the network namespace in which sessions are set. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-10-23ipv6: fix IPv6 processing of sessions that only have only a link-local addressGuillaume Nault
Several modules assume that if ses->ipv6 is set, then ses->ipv6->addr_list contains at least one element. But this is not true if ipv6 was allocated by the pseudo ipdb backend of ipv6cp (ipv6cp_opt_intfid.c). That is, if the PPP session only has an automatic link-local address. This leads modules like pppd-compat and dhcpv6 to access invalid memory when trying to retrieve the IPv6 address of a PPP session. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-08-24load ipoe and vlan_mon module on startDmitry Kozlov
2018-07-31Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/codeDmitry Kozlov
2018-07-31Merge branch 'master' of github.com:xebd/accel-pppDmitry Kozlov
2018-06-24pppd_compat: fix indentation in ev_radius_coa()Guillaume Nault
Missing tab was misleading. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-06-24pppd_compat: run scripts in the PPP device netnsGuillaume Nault
If the PPP device is set up into a specific network namespace, all the configuration that goes with it belongs to this same netns. Therefore, we need to run the up/down scripts in that namespace too. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-06-24pppd_compat: fix argv[0] when calling ip-pre-upGuillaume Nault
The first argument passed to the ip-pre-up script, was mistakenly set to the value of ip-up. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-06-08Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/codeDmitry Kozlov
2018-06-08ipoe: use vendor option for attr_dhcp_opt82_xxx tooDmitry Kozlov
2018-06-05sstp: add ECDSA certs support and ssl-ecdh-curve option for ECDHE ciphersVladislav Grishenko
2018-06-05sstp: add ssl-dhparam option for DHE ciphersVladislav Grishenko
2018-06-04Merge branch 'master' of https://github.com/xebd/accel-pppDmitry Kozlov
2018-06-04sstp: snmp: add missed files, fix 0d454ad7102506ecd12a36239f6604f7e4b57aaeVladislav Grishenko
2018-06-03sstp: use generic HTTP/1.0 error codes for better compatibilityVladislav Grishenko
2018-06-03sstp: add disconnection reason loggingVladislav Grishenko
2018-06-03sstp: implement Compound MAC validationVladislav Grishenko
2018-06-03sstp: add snmp supportVladislav Grishenko
2018-06-03sstp: add session events & stat supportVladislav Grishenko
2018-06-02sstp: drop port from calling_station_id/called_station_idVladislav Grishenko
2018-06-01sstp: fix proxy proto v1 over ipv6Vladislav Grishenko
2018-06-01ipoe: lua: introduced ipaddr field to session objectDmitry Kozlov
2018-06-01sstp: implement configurable http error response incl. redirectVladislav Grishenko
2018-06-01sstp: http: add verbose response loggingVladislav Grishenko
2018-05-31ipoe: use lua function to generate username for UP sessions tooDmitry Kozlov
2018-05-31ipoe: lua: introduced hwaddr field to session objectDmitry Kozlov
example function to use mac address as username: function username(ses) return ses:hwaddr() end
2018-05-28triton: fixed improper lockingDmitry Kozlov
2018-05-28ipoe: do not bring interface down on session termination in shared=0 modeDmitry Kozlov
2018-05-25man: fixed typoDmitry Kozlov
2018-05-25ipoe: introduced ip-unnumbered per-interface optionDmitry Kozlov
2018-05-25ipoe: do not remove address on session finish if ifcfg=1Dmitry Kozlov
2018-05-25ifcfg: assign p-t-p address if mask=32 and regular address in other casesDmitry Kozlov
2018-05-25ipoe: small fix for previous commitDmitry Kozlov
2018-05-25ipoe: improved mac change detectionDmitry Kozlov
2018-05-25ipoe: do not wait packet from ipoe kernel module in "shared=0,start=up" modeDmitry Kozlov
ipoe: pass mask to ifcfg in ip unnumbered mode
2018-05-25ifcfg: assign address using ipaddr_add_peer instead SIOCSIFADDR/SIOCSIFDSTADDRDmitry Kozlov
2018-04-21shaper: "change" command: consider value to be in simple formatDmitry Kozlov
2018-04-19sstp: fix connection drop with global mppe=required optionVladislav Grishenko
2018-04-19sstp: fix coexistance of host-name= & port= optionsVladislav Grishenko
2018-04-12radius: initialize rad_attr_t::raw field on newly inserted attributesDmitry Kozlov
2018-04-06radius: allow CoA/DM by single username attributeDmitry Kozlov
2018-04-03ipoe: assign default values to verbose and unit-cache if not specified on ↵Dmitry Kozlov
config reload
2018-04-03ppp: move call connect_ppp_channel to appropriate place (when noauth=1)Dmitry Kozlov
2018-03-24auth: fix re-authentication of peer in all chap modulesGuillaume Nault
If the peer re-authenticates (because of option conf_interval) and pwdb calls auth_result(), we may add the interval timer again to the session context. This crashes accel-ppp when deleting the session, because the interval timer is removed only once and the superfluous timers are still running. Therefore, when removing the context, triton detects this issue and calls abort(). To fix this, we need to detect if the session is already started and just send a CHAP Success message in this case. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-03-24auth: avoid sending duplicate CHAP Failure messages in mschap-v1 and mschap-v2Guillaume Nault
When pwdb returns PWDB_NO_IMPL and chap_recv_response() performs the authentication itself, it delegates this task to chap_check_response(). This function sends a CHAP Failure message if it can't retrieve the password, but not in case of password mismatch. Since chap_recv_response() already sends a CHAP Failure message on error, the one sent by chap_check_response() is useless. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-06 13:19:39 +0000