accel-ppp-xebd.git/accel-pppd/auth, branch 1.12.0

auth: remove .recv_conf_req from struct ppp_auth_handler_t

2018-11-27T06:56:56+00:00

This callback isn't used anymore. Let's remove it from all authentication backends. Signed-off-by: Guillaume Nault

auth: fix re-authentication of peer in all chap modules

2018-03-24T06:41:38+00:00

If the peer re-authenticates (because of option conf_interval) and pwdb calls auth_result(), we may add the interval timer again to the session context. This crashes accel-ppp when deleting the session, because the interval timer is removed only once and the superfluous timers are still running. Therefore, when removing the context, triton detects this issue and calls abort(). To fix this, we need to detect if the session is already started and just send a CHAP Success message in this case. Signed-off-by: Guillaume Nault

auth: avoid sending duplicate CHAP Failure messages in mschap-v1 and mschap-v2

2018-03-24T06:41:22+00:00

When pwdb returns PWDB_NO_IMPL and chap_recv_response() performs the authentication itself, it delegates this task to chap_check_response(). This function sends a CHAP Failure message if it can't retrieve the password, but not in case of password mismatch. Since chap_recv_response() already sends a CHAP Failure message on error, the one sent by chap_check_response() is useless. Signed-off-by: Guillaume Nault

auth: fix missing CHAP Success message in chap-md5

2018-03-24T06:41:01+00:00

When pwdb returns PWDB_NO_IMPL, then chap_recv_response() tries to authenticate the peer itself. If this authentication succeeds but the session is already started (in case of re-authentication, with option conf_interval), no CHAP Success is sent. This patch sends the missing CHAP Success message in this case, so that the peer knows that its response has been received and accepted, and that no retransmission is required. Signed-off-by: Guillaume Nault

ppp_auth: fixed possible use after free

2016-03-04T19:08:17+00:00

remove trailing whitespaces

2014-11-22T05:56:40+00:00

fixed compilation warnings

2014-09-22T09:12:36+00:00

rewrite of authentication/accounting procedures

2014-09-20T08:18:49+00:00

This patch gets rid of synchronuos style of authentication/accounting. Synchronous style of authentication/accounting produced sleeping threads which becomes a problem when lots of sessions started/stopped and all they want authorization/accounting.

auth: do not decrement id on retransmit

2014-07-11T10:29:41+00:00

ppp: auth: answer "Success" to retrasmitted messages if auth layer is already started

2014-07-09T14:05:54+00:00