denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use client identities from successful authentications, only

Browse Source
This commit is contained in:
Andreas Steffen
2013-08-15 23:34:23 +02:00
parent d6719c974c
commit 7c027f7983
1 changed files with 12 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libpttls/pt_tls_server.c
+12 -18
View File
@@ -112,33 +112,27 @@ static status_t process_sasl(private_pt_tls_server_t *this,
sasl_mechanism_t *sasl, chunk_t data)
{
bio_writer_t *writer;
status_t status;
identification_t *client;
tnccs_t *tnccs;
status = sasl->process(sasl, data);
if (status != NEED_MORE)
{
client = sasl->get_client(sasl);
if (client)
{
DBG1(DBG_TNC, "SASL client identity is '%Y'", client);
this->tnccs->set_peer_id(this->tnccs, client);
if (streq(sasl->get_name(sasl), "PLAIN"))
{
tnccs = (tnccs_t*)this->tnccs;
tnccs->set_auth_type(tnccs, TNC_AUTH_PASSWORD);
}
}
}
switch (status)
switch (sasl->process(sasl, data))
{
case NEED_MORE:
return NEED_MORE;
case SUCCESS:
DBG1(DBG_TNC, "SASL %s authentication successful",
sasl->get_name(sasl));
client = sasl->get_client(sasl);
if (client)
{
DBG1(DBG_TNC, "SASL client identity is '%Y'", client);
this->tnccs->set_peer_id(this->tnccs, client);
if (streq(sasl->get_name(sasl), "PLAIN"))
{
tnccs = (tnccs_t*)this->tnccs;
tnccs->set_auth_type(tnccs, TNC_AUTH_PASSWORD);
}
}
writer = bio_writer_create(1);
writer->write_uint8(writer, PT_TLS_SASL_RESULT_SUCCESS);
if (pt_tls_write(this->tls, writer, PT_TLS_SASL_RESULT,