summaryrefslogtreecommitdiff
path: root/accel-pppd/radius
AgeCommit message (Collapse)Author
2017-10-17radius: implemented lua supportDmitry Kozlov
to get radius object use session:module("radius") function radius object provides flollowing functions: radius:attrs() - returns array of attributes {"name" = NAME, "vendor" = VENDOR|nil} radius:attr(name[,vendor]) - returns value of attribute (may return multiple results) Example: function ip_up(ses) rad = ses:module("radius") attrs = rad:attrs() if attrs then print("attrs:") for _,a in pairs(attrs) do io.write("\t") if a.vendor then io.write(a.vendor..":") end io.write(a.name.."=") print(rad:attr(a.name, a.vendor)) end end end
2017-10-09radius: split request queue to 2 subqueuesDmitry Kozlov
1 - is high priority queue for Access-Request and Account-Request(Start) 2 - is low priority queue for Account-Request(Alive) and Account-Request(Stop) This patch intended to prioritize sessions connecting requests over disconnects and interim updates.
2016-12-10radius: extended support for freeradius dictionariesDmitry Kozlov
2016-07-09radius: do not execute interface rename immediately, store new name for ↵Dmitry Kozlov
later use Bacause interface may not still exists in authentication phase
2016-06-25radius: do not send NAS-Port and NAS-Port-Id if they are undefinedDmitry Kozlov
2016-06-07Merge branch 'master' of ssh://git.code.sf.net/p/accel-ppp/codeDmitry Kozlov
2016-06-07radius: update Session-Timeout by CoADmitry Kozlov
2016-06-02radius: initialise ipv6db addresses completelyGuillaume Nault
The 'installed' bit of the allocated ipv6db_addr_t structure needs to be initialised. This is because ap_session_ifdown() reads this bit to know if the address or route needs to be removed from the kernel. The 'installed' bit is set by ap_session_accounting_started() and the ND and DHCPV6 protocol handlers, but disconnection could happen before these steps. Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
2016-05-31Fixup - don't divide on unchecked values. Multiply instead.Mihail Vasilev
2016-04-30radius: add Delegated-IPv6-Prefix to accounting packetsDmitry Kozlov
2016-04-06radius: do not mark request as active if send function failsDmitry Kozlov
2016-03-18ipoe: implemented new option "start=auto"Dmitry Kozlov
If start=auto is specified then accel-pppd automatically starts session with username = interface name on shared=0 interfaces. Use it with conjuction vlan_mon. So any packet may start session.
2016-01-03Update packet.cliguojiang
radius server error packet may be coredump.
2016-01-03radius: implemented handling of Framed-Route attributeDmitry Kozlov
Framed-Route has following syntax: Framed-Route=address[/mask] [gateway] If gateway is not specified then route would be attached to session interface.
2015-02-21radius: override session's idle and timeout timers values by Idle-Timeout ↵Dmitry Kozlov
and Session-Timeout attributes
2015-02-20ppp: set unit_idx from NAS_Port attribute if presentFrançois Cachereul
Signed-off-by: François Cachereul <f.cachereul@alphalink.fr>
2014-11-22remove trailing whitespacesDmitry Kozlov
2014-11-11radius: add missing log_switchDmitry Kozlov
2014-11-10radius: disable read handler when put req into wait queue (fixes race ↵Dmitry Kozlov
conditions)
2014-11-10radius: fixed bugDmitry Kozlov
2014-11-05radius: early ipv6_dp assignmentDmitry Kozlov
2014-10-29radius: fix call to memset on rdp->auth_ctxFrançois Cachereul
The mistake was revealed by gcc 4.9.0 Signed-off-by: François Cachereul <f.cachereul@alphalink.fr> Signed-off-by: Guillaume Nault <g.nault@alphalink.fr> Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
2014-10-28radius: fixed server reallocation for timed out requestsDmitry Kozlov
2014-10-23radius: fixed stuck during shutdown when radius server does not respondDmitry Kozlov
2014-10-23radius: introduced max-fail optionDmitry Kozlov
Before this patch any single fail (no responce for max_try requests) caused radius server to enter "fail" state, which may be unwanted behaviour, because radius may not respond for interim Accounting-Request by some reasons. This patch introduces "max-fail" option which specifies number of unreplied requests in a row after which server enters into "fail" state. (Actual only for multi-server configurations)
2014-10-23radius: fixed backup radius selectionDmitry Kozlov
2014-10-23radius: fixed server reallocation for queued requests if current server does ↵Dmitry Kozlov
not respond
2014-10-22radius: check for previous request was finished in interim update timerDmitry Kozlov
2014-10-06radius: fixed Accounting-On/Accounting-Off functionalityDmitry Kozlov
2014-10-04radius: various bug fixesDmitry Kozlov
2014-10-03get rid of time(), use clock_gettime(CLOCK_MONOTONIC) insteadDmitry Kozlov
2014-09-30radius: fixed handling deferred requestsDmitry Kozlov
2014-09-26radius: cancel starting accounting request if session terminated before ↵Dmitry Kozlov
server replied
2014-09-23radius: fixed counting of active requestsDmitry Kozlov
2014-09-22fixed compilation warningsDmitry Kozlov
2014-09-20rewrite of authentication/accounting proceduresDmitry Kozlov
This patch gets rid of synchronuos style of authentication/accounting. Synchronous style of authentication/accounting produced sleeping threads which becomes a problem when lots of sessions started/stopped and all they want authorization/accounting.
2014-08-25radius: delete timeout timer if request sending fails (fixes double server ↵Dmitry Kozlov
release)
2014-08-04radius: terminate session if read interfaces statistics failsDmitry Kozlov
2014-08-01radius: close socket after receiving accounting responseDmitry Kozlov
2014-07-24radius: exit from active interim request when termination event occuresDmitry Kozlov
2014-07-17radius: check for reply id is equal request id in interim requestsDmitry Kozlov
2014-07-11radius: fixed handling socket errors during interim updatesDmitry Kozlov
2014-06-17radius: introduced attr-tunnel-type optionDmitry Kozlov
If specified then accel-ppp will send tunnel type as string (pppoe,pptp,l2tp,ipoe).
2014-06-17auth_mschap,radius: fixed improper passing MS-CHAP-Error, Reply-Message to ↵Dmitry Kozlov
auth modules Passed strings was not nullterminated
2014-06-03make IPv4 address to string conversions endian friendlyDmitry Kozlov
2014-05-13radius: introduced weight and backup per-server optionsDmitry Kozlov
New options are applied to server option as server=...[,weight=x][,backup] Weight is used for multi-server configurations (larger weight takes more users). Backup is used to mark backup server f.e. server which will be used only if all other servers are failed.
2014-05-12radius: use NAS-Port-Id in Access-Accept for interface renamingDmitry Kozlov
2014-05-12radius: add support for Nas-Port-Id attribute (interface name)Dmitry Kozlov
2014-05-12radius: close socket after receiving accounting replyDmitry Kozlov
2014-05-12radius: release auth request immediatly after get responceDmitry Kozlov
There is no need to keep auth request structure in memory during whole session life time. It wastes memory and file descriptors