denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-radius: use IKE_SA unique id instead of peer identity to manage virtual IPs

Browse Source 
Fixes some corner cases if multiple tunnels use the same peer identity.
This commit is contained in:
Martin Willi
2013-05-06 14:56:01 +02:00
parent a3854d8371
commit 69620a48e8
3 changed files with 100 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius.c
+5 -3
View File
@@ -412,7 +412,8 @@ static void process_cfg_attributes(private_eap_radius_t *this,
host = host_create_from_chunk(AF_INET, data, 0);
if (host)
{
provider->add_framed_ip(provider, this->peer, host);
provider->add_framed_ip(provider,
ike_sa->get_unique_id(ike_sa), host);
}
}
}
@@ -429,8 +430,9 @@ static void process_cfg_attributes(private_eap_radius_t *this,
case 36: /* CVPN3000-IPSec-Banner2 */
if (ike_sa->supports_extension(ike_sa, EXT_CISCO_UNITY))
{
provider->add_attribute(provider, this->peer,
UNITY_BANNER, data);
provider->add_attribute(provider,
ike_sa->get_unique_id(ike_sa),
UNITY_BANNER, data);
}
break;
default: