summaryrefslogtreecommitdiff
path: root/accel-pppd/auth
AgeCommit message (Collapse)Author
2018-11-27auth: remove .recv_conf_req from struct ppp_auth_handler_tGuillaume Nault
This callback isn't used anymore. Let's remove it from all authentication backends. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-03-24auth: fix re-authentication of peer in all chap modulesGuillaume Nault
If the peer re-authenticates (because of option conf_interval) and pwdb calls auth_result(), we may add the interval timer again to the session context. This crashes accel-ppp when deleting the session, because the interval timer is removed only once and the superfluous timers are still running. Therefore, when removing the context, triton detects this issue and calls abort(). To fix this, we need to detect if the session is already started and just send a CHAP Success message in this case. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-03-24auth: avoid sending duplicate CHAP Failure messages in mschap-v1 and mschap-v2Guillaume Nault
When pwdb returns PWDB_NO_IMPL and chap_recv_response() performs the authentication itself, it delegates this task to chap_check_response(). This function sends a CHAP Failure message if it can't retrieve the password, but not in case of password mismatch. Since chap_recv_response() already sends a CHAP Failure message on error, the one sent by chap_check_response() is useless. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2018-03-24auth: fix missing CHAP Success message in chap-md5Guillaume Nault
When pwdb returns PWDB_NO_IMPL, then chap_recv_response() tries to authenticate the peer itself. If this authentication succeeds but the session is already started (in case of re-authentication, with option conf_interval), no CHAP Success is sent. This patch sends the missing CHAP Success message in this case, so that the peer knows that its response has been received and accepted, and that no retransmission is required. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2016-03-04ppp_auth: fixed possible use after freeDmitry Kozlov
2014-11-22remove trailing whitespacesDmitry Kozlov
2014-09-22fixed compilation warningsDmitry Kozlov
2014-09-20rewrite of authentication/accounting proceduresDmitry Kozlov
This patch gets rid of synchronuos style of authentication/accounting. Synchronous style of authentication/accounting produced sleeping threads which becomes a problem when lots of sessions started/stopped and all they want authorization/accounting.
2014-07-11auth: do not decrement id on retransmitDmitry Kozlov
2014-07-09ppp: auth: answer "Success" to retrasmitted messages if auth layer is ↵Dmitry Kozlov
already started
2014-06-17auth_mschap,radius: fixed improper passing MS-CHAP-Error, Reply-Message to ↵Dmitry Kozlov
auth modules Passed strings was not nullterminated
2013-10-30fix build with internal & tomcrypt crypto librariesDmitry Kozlov
Signed-off-by: Vladislav Grishenko <themiron@mail.ru>
2013-07-05auth_chap: fixed incorrect check for received buffer sizeDmitry Kozlov
2013-03-16ipoe: fixed shared=1 modeKozlov Dmitry
2013-01-25cmake: use CMAKE_FIND_ROOT_PATH and LIB_SUFFIXKozlov Dmitry
2013-01-24backport 1.7Kozlov Dmitry
* l2tp: Fix allocation checking when adding octets AVP * cli, tcp: Fix non-NULL terminated string reception * Fix va_end() missing calls * chap-secrets: implemented encryption * auth_pap: make messages like other auth modules * cli: check xmit_buf is not null at enter to write function * pppoe: implemented regular expression support * chap-secrets: implemented encryption * ippool: fixed initialization order * optional shaper compiling * ppp: dns/wins code cleanup
2012-09-05Fix format string errorsGuillaume Nault
Fix several errors and compiler warnings in format string arguments. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2012-08-29fix typo (successed -> succeeded)Kozlov Dmitry
Conflicts: accel-pppd/ppp/ppp_auth.c
2012-06-19general preparation for IPoE integrationKozlov Dmitry
2012-05-28auth_mschap_v2: remove debugging codeKozlov Dmitry
2012-05-28auth_chap*: use previous challenge value in packet resend instead of ↵Kozlov Dmitry
generating new one
2012-01-31changed modules load priorityKozlov Dmitry
2012-01-13set FD_CLOEXEC on opened file descriptorsKozlov Dmitry
2011-09-20auth: config reloadKozlov Dmitry
2011-09-03implemented crypto library selection: -DCRYPTO=OPENSSL|TOMCRYPT|INTERNAL ↵Kozlov Dmitry
(default OPENSSL)
2011-08-16ppp: improved CCP/IPCP handlingKozlov Dmitry
2011-07-22auth_mschap, radius: if radius replies with MS-CHAP-Error attribute send ↵Kozlov Dmitry
this value in mschap failure message
2011-06-08changed module init sequenceDmitry Kozlov
2011-05-30rewrited initialization procedure (fix gcc-4.6 builds)Kozlov Dmitry
2011-04-20ppp: introduced new option 'single-session' to control single session per userKozlov Dmitry
2011-01-17memory usage optimizationDmitry Kozlov
2011-01-13auth: bugs fixesDmitry Kozlov
2011-01-05rename accel-pptp to accel-pppDmitry Kozlov