denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactored RADIUS DAE IKE_SA lookup

Browse Source
This commit is contained in:
Martin Willi
2012-03-05 18:06:14 +01:00
parent 964b0c144e
commit 245e3c52a2
1 changed files with 41 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius_dae.c
+41 -17
View File
@@ -97,16 +97,35 @@ static void send_response(private_eap_radius_dae_t *this,
} }
/** /**
* Process a DAE disconnect request, send response * Add all IKE_SAs matching to user to a list
*/ */
static void process_disconnect(private_eap_radius_dae_t *this, static void add_matching_ike_sas(linked_list_t *list, identification_t *user)
radius_message_t *request, host_t *client)
{ {
enumerator_t *enumerator, *sa_enum; enumerator_t *enumerator;
ike_sa_t *ike_sa;
enumerator = charon->ike_sa_manager->create_enumerator(
charon->ike_sa_manager, FALSE);
while (enumerator->enumerate(enumerator, &ike_sa))
{
if (user->matches(user, ike_sa->get_other_eap_id(ike_sa)))
{
list->insert_last(list,
(void*)(uintptr_t)ike_sa->get_unique_id(ike_sa));
}
}
enumerator->destroy(enumerator);
}
/**
* Get list of IKE_SAs matching a Disconnect/CoA request
*/
static linked_list_t *get_matching_ike_sas(private_eap_radius_dae_t *this,
radius_message_t *request, host_t *client)
{
enumerator_t *enumerator;
identification_t *user; identification_t *user;
linked_list_t *ids; linked_list_t *ids;
uintptr_t id;
ike_sa_t *ike_sa;
chunk_t data; chunk_t data;
int type; int type;
@@ -120,22 +139,27 @@ static void process_disconnect(private_eap_radius_dae_t *this,
user = identification_create_from_data(data); user = identification_create_from_data(data);
DBG1(DBG_CFG, "received RADIUS DAE %N for %Y from %H", DBG1(DBG_CFG, "received RADIUS DAE %N for %Y from %H",
radius_message_code_names, RMC_DISCONNECT_REQUEST, user, client); radius_message_code_names, RMC_DISCONNECT_REQUEST, user, client);
sa_enum = charon->ike_sa_manager->create_enumerator( add_matching_ike_sas(ids, user);
charon->ike_sa_manager, FALSE);
while (sa_enum->enumerate(sa_enum, &ike_sa))
{
if (user->matches(user, ike_sa->get_other_eap_id(ike_sa)))
{
id = ike_sa->get_unique_id(ike_sa);
ids->insert_last(ids, (void*)id);
}
}
sa_enum->destroy(sa_enum);
user->destroy(user); user->destroy(user);
} }
} }
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
return ids;
}
/**
* Process a DAE disconnect request, send response
*/
static void process_disconnect(private_eap_radius_dae_t *this,
radius_message_t *request, host_t *client)
{
enumerator_t *enumerator;
linked_list_t *ids;
uintptr_t id;
ids = get_matching_ike_sas(this, request, client);
if (ids->get_count(ids)) if (ids->get_count(ids))
{ {
DBG1(DBG_CFG, "closing %d IKE_SA%s matching %N, sending %N", DBG1(DBG_CFG, "closing %d IKE_SA%s matching %N, sending %N",