denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-radius: Forward UNITY_DEF_DOMAIN and UNITY_SPLITDNS_NAME attributes

Browse Source 
The contents of the CVPN3000-IPSec-Default-Domain(28) and
CVPN3000-IPSec-Split-DNS-Names(29) radius attributes are forwarded in
the corresponding Unity configuration attributes.
This commit is contained in:
Tobias Brunner
2013-10-11 15:52:22 +02:00
parent 121c64f0d5
commit 66229619cf
1 changed files with 25 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius.c
+25 -3
View File
@@ -391,6 +391,27 @@ static void process_timeout(radius_message_t *msg)
}
}
/**
* Add a Cisco Unity configuration attribute
*/
static void add_unity_attribute(eap_radius_provider_t *provider, u_int32_t id,
int type, chunk_t data)
{
switch (type)
{
case 15: /* CVPN3000-IPSec-Banner1 */
case 36: /* CVPN3000-IPSec-Banner2 */
provider->add_attribute(provider, id, UNITY_BANNER, data);
break;
case 28: /* CVPN3000-IPSec-Default-Domain */
provider->add_attribute(provider, id, UNITY_DEF_DOMAIN, data);
break;
case 29: /* CVPN3000-IPSec-Split-DNS-Names */
provider->add_attribute(provider, id, UNITY_SPLITDNS_NAME, data);
break;
}
}
/**
* Handle Framed-IP-Address and other IKE configuration attributes
*/
@@ -430,12 +451,13 @@ static void process_cfg_attributes(radius_message_t *msg)
switch (type)
{
case 15: /* CVPN3000-IPSec-Banner1 */
case 28: /* CVPN3000-IPSec-Default-Domain */
case 29: /* CVPN3000-IPSec-Split-DNS-Names */
case 36: /* CVPN3000-IPSec-Banner2 */
if (ike_sa->supports_extension(ike_sa, EXT_CISCO_UNITY))
{
provider->add_attribute(provider,
ike_sa->get_unique_id(ike_sa),
UNITY_BANNER, data);
add_unity_attribute(provider,
ike_sa->get_unique_id(ike_sa), type, data);
}
break;
default: