denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-radius: Add option to not close IKE_SAs on timeouts during interim accouting updates

Browse Source 
Fixes #528.
This commit is contained in:
Tobias Brunner
2014-03-31 14:32:44 +02:00
parent a30e0001e4
commit 00b91c4325
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/eap-radius.opt
+4
View File
@@ -1,6 +1,10 @@
charon.plugins.eap-radius.accounting = no charon.plugins.eap-radius.accounting = no
Send RADIUS accounting information to RADIUS servers. Send RADIUS accounting information to RADIUS servers.
charon.plugins.eap-radius.accounting_close_on_timeout = yes
Close the IKE_SA if there is a timeout during interim RADIUS accounting
updates.
charon.plugins.eap-radius.accounting_requires_vip = no charon.plugins.eap-radius.accounting_requires_vip = no
If enabled, accounting is disabled unless an IKE_SA has at least one If enabled, accounting is disabled unless an IKE_SA has at least one
virtual IP. virtual IP.
src/libcharon/plugins/eap_radius/eap_radius_accounting.c
+6 -1
View File
@@ -410,7 +410,12 @@ static job_requeue_t send_interim(interim_data_t *data)
{ {
if (!send_message(this, message)) if (!send_message(this, message))
{ {
eap_radius_handle_timeout(data->id); if (lib->settings->get_bool(lib->settings,
"%s.plugins.eap-radius.accounting_close_on_timeout",
TRUE, lib->ns))
{
eap_radius_handle_timeout(data->id);
}
} }
message->destroy(message); message->destroy(message);
} }