denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-radius: do RADIUS/IKE attribute forwarding in XAuth backend

Browse Source
This commit is contained in:
Martin Willi
2013-07-29 09:00:49 +02:00
parent c434b2a4a9
commit 3a399574c2
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius_forward.c
+2 -1
View File
@@ -248,7 +248,8 @@ static void ike2queue(message_t *message, linked_list_t *queue,
enumerator = message->create_payload_enumerator(message); enumerator = message->create_payload_enumerator(message);
while (enumerator->enumerate(enumerator, &payload)) while (enumerator->enumerate(enumerator, &payload))
{ {
if (payload->get_type(payload) == NOTIFY) if (payload->get_type(payload) == NOTIFY ||
payload->get_type(payload) == NOTIFY_V1)
{ {
notify = (notify_payload_t*)payload; notify = (notify_payload_t*)payload;
if (notify->get_notify_type(notify) == RADIUS_ATTRIBUTE) if (notify->get_notify_type(notify) == RADIUS_ATTRIBUTE)
src/libcharon/plugins/eap_radius/eap_radius_xauth.c
+3
View File
@@ -16,6 +16,7 @@
#include "eap_radius_xauth.h" #include "eap_radius_xauth.h"
#include "eap_radius_plugin.h" #include "eap_radius_plugin.h"
#include "eap_radius.h" #include "eap_radius.h"
#include "eap_radius_forward.h"
#include <daemon.h> #include <daemon.h>
#include <radius_client.h> #include <radius_client.h>
@@ -76,10 +77,12 @@ static status_t verify_radius(private_eap_radius_xauth_t *this, chunk_t pass)
request->add(request, RAT_USER_PASSWORD, pass); request->add(request, RAT_USER_PASSWORD, pass);
eap_radius_build_attributes(request); eap_radius_build_attributes(request);
eap_radius_forward_from_ike(request);
response = this->client->request(this->client, request); response = this->client->request(this->client, request);
if (response) if (response)
{ {
eap_radius_forward_to_ike(response);
switch (response->get_code(response)) switch (response->get_code(response))
{ {
case RMC_ACCESS_ACCEPT: case RMC_ACCESS_ACCEPT: