eap-radius: Optionally send Class attributes in RADIUS accounting messages

If enabled, add the RADIUS Class attributes received in Access-Accept messages
to RADIUS accounting messages as suggested by RFC 2865 section 5.25.

Fixes #2451.
This commit is contained in:
Tobias Brunner
2017-11-02 09:57:05 +01:00
parent 26bda4e904
commit 655924074b
4 changed files with 87 additions and 21 deletions
+4
View File
@@ -13,6 +13,10 @@ charon.plugins.eap-radius.accounting_requires_vip = no
If enabled, accounting is disabled unless an IKE_SA has at least one
virtual IP. Only for IKEv2, for IKEv1 a virtual IP is strictly necessary.
charon.plugins.eap-radius.accounting_send_class = no
If enabled, adds the Class attributes received in Access-Accept message to
the RADIUS accounting messages.
charon.plugins.eap-radius.class_group = no
Use class attributes in Access-Accept messages as group membership
information.