summaryrefslogtreecommitdiff
path: root/accel-pppd/radius
AgeCommit message (Collapse)Author
2016-06-25radius: do not send NAS-Port and NAS-Port-Id if they are undefinedDmitry Kozlov
2016-06-07Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/codeDmitry Kozlov
2016-06-07radius: update Session-Timeout by CoADmitry Kozlov
2016-06-02radius: initialise ipv6db addresses completelyGuillaume Nault
The 'installed' bit of the allocated ipv6db_addr_t structure needs to be initialised. This is because ap_session_ifdown() reads this bit to know if the address or route needs to be removed from the kernel. The 'installed' bit is set by ap_session_accounting_started() and the ND and DHCPV6 protocol handlers, but disconnection could happen before these steps. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2016-05-31Fixup - don't divide on unchecked values. Multiply instead.Mihail Vasilev
2016-04-30radius: add Delegated-IPv6-Prefix to accounting packetsDmitry Kozlov
2016-04-06radius: do not mark request as active if send function failsDmitry Kozlov
2016-03-18ipoe: implemented new option "start=auto"Dmitry Kozlov
If start=auto is specified then accel-pppd automatically starts session with username = interface name on shared=0 interfaces. Use it with conjuction vlan_mon. So any packet may start session.
2016-01-03Update packet.cliguojiang
radius server error packet may be coredump.
2016-01-03radius: implemented handling of Framed-Route attributeDmitry Kozlov
Framed-Route has following syntax: Framed-Route=address[/mask] [gateway] If gateway is not specified then route would be attached to session interface.
2015-02-21radius: override session's idle and timeout timers values by Idle-Timeout ↵Dmitry Kozlov
and Session-Timeout attributes
2015-02-20ppp: set unit_idx from NAS_Port attribute if presentFrançois Cachereul
Signed-off-by: François Cachereul <f.cachereul@alphalink.fr>
2014-11-22remove trailing whitespacesDmitry Kozlov
2014-11-11radius: add missing log_switchDmitry Kozlov
2014-11-10radius: disable read handler when put req into wait queue (fixes race ↵Dmitry Kozlov
conditions)
2014-11-10radius: fixed bugDmitry Kozlov
2014-11-05radius: early ipv6_dp assignmentDmitry Kozlov
2014-10-29radius: fix call to memset on rdp->auth_ctxFrançois Cachereul
The mistake was revealed by gcc 4.9.0 Signed-off-by: François Cachereul <f.cachereul@alphalink.fr> Signed-off-by: Guillaume Nault <g.nault@alphalink.fr> Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
2014-10-28radius: fixed server reallocation for timed out requestsDmitry Kozlov
2014-10-23radius: fixed stuck during shutdown when radius server does not respondDmitry Kozlov
2014-10-23radius: introduced max-fail optionDmitry Kozlov
Before this patch any single fail (no responce for max_try requests) caused radius server to enter "fail" state, which may be unwanted behaviour, because radius may not respond for interim Accounting-Request by some reasons. This patch introduces "max-fail" option which specifies number of unreplied requests in a row after which server enters into "fail" state. (Actual only for multi-server configurations)
2014-10-23radius: fixed backup radius selectionDmitry Kozlov
2014-10-23radius: fixed server reallocation for queued requests if current server does ↵Dmitry Kozlov
not respond
2014-10-22radius: check for previous request was finished in interim update timerDmitry Kozlov
2014-10-06radius: fixed Accounting-On/Accounting-Off functionalityDmitry Kozlov
2014-10-04radius: various bug fixesDmitry Kozlov
2014-10-03get rid of time(), use clock_gettime(CLOCK_MONOTONIC) insteadDmitry Kozlov
2014-09-30radius: fixed handling deferred requestsDmitry Kozlov
2014-09-26radius: cancel starting accounting request if session terminated before ↵Dmitry Kozlov
server replied
2014-09-23radius: fixed counting of active requestsDmitry Kozlov
2014-09-22fixed compilation warningsDmitry Kozlov
2014-09-20rewrite of authentication/accounting proceduresDmitry Kozlov
This patch gets rid of synchronuos style of authentication/accounting. Synchronous style of authentication/accounting produced sleeping threads which becomes a problem when lots of sessions started/stopped and all they want authorization/accounting.
2014-08-25radius: delete timeout timer if request sending fails (fixes double server ↵Dmitry Kozlov
release)
2014-08-04radius: terminate session if read interfaces statistics failsDmitry Kozlov
2014-08-01radius: close socket after receiving accounting responseDmitry Kozlov
2014-07-24radius: exit from active interim request when termination event occuresDmitry Kozlov
2014-07-17radius: check for reply id is equal request id in interim requestsDmitry Kozlov
2014-07-11radius: fixed handling socket errors during interim updatesDmitry Kozlov
2014-06-17radius: introduced attr-tunnel-type optionDmitry Kozlov
If specified then accel-ppp will send tunnel type as string (pppoe,pptp,l2tp,ipoe).
2014-06-17auth_mschap,radius: fixed improper passing MS-CHAP-Error, Reply-Message to ↵Dmitry Kozlov
auth modules Passed strings was not nullterminated
2014-06-03make IPv4 address to string conversions endian friendlyDmitry Kozlov
2014-05-13radius: introduced weight and backup per-server optionsDmitry Kozlov
New options are applied to server option as server=...[,weight=x][,backup] Weight is used for multi-server configurations (larger weight takes more users). Backup is used to mark backup server f.e. server which will be used only if all other servers are failed.
2014-05-12radius: use NAS-Port-Id in Access-Accept for interface renamingDmitry Kozlov
2014-05-12radius: add support for Nas-Port-Id attribute (interface name)Dmitry Kozlov
2014-05-12radius: close socket after receiving accounting replyDmitry Kozlov
2014-05-12radius: release auth request immediatly after get responceDmitry Kozlov
There is no need to keep auth request structure in memory during whole session life time. It wastes memory and file descriptors
2014-05-12triton: improved epoll events handlingDmitry Kozlov
2014-01-19radius: fix IWF-Session identifier in RFC 4679 dictionaryGuillaume Nault
RFC 4679 assigns identifier 0xFE (254) to the IWF-Session attribute. This is consistent with the identifier value specified by TR-101. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2014-01-17radius: allow creation of zero length attributesGuillaume Nault
Some attributes, like IWF-Session (RFC 4679), may have no payload. Allow the len parameter of rad_packet_add_octets() to be 0 in order to add such attributes (and do the same for rad_packet_change_octets() for API consistency). Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2013-10-23radius: skip vendor specific attributes when searching session for DM/CoADmitry Kozlov
This fixes invalid assosiation vendor specific Cisco-AVPair to Username attribute which both have same id and prevents to find sessions in some circumstances. Signed-off-by: Dmitry Kozlov <xeb@mail.ru>