summaryrefslogtreecommitdiff
path: root/usr.sbin/npppd
AgeCommit message (Collapse)Author
2013-01-31port numbers for radius servers were not configured correctly.YASUOKA Masahiko
pointed out by mxb and Robert Blacquiere
2013-01-31Deleting ip address of tun inteface was failed. This was caused byYASUOKA Masahiko
passing wrong inteface name to ioctl(). pointed out by csszep at gmail.com
2013-01-29Add pppx.4 and enable links to it.YASUOKA Masahiko
ok dlg@
2013-01-07Remove inline from ppp_output() function to fix building with LLVM.Brad Smith
ok yasuoka@ millert@
2012-12-19Remove extra semicolon in "if (...);" which caused an incorrect flag toStuart Henderson
be set in _this->keylenbits. Found by scanning the tree using coccinelle. ok yasuoka
2012-12-05Remove excessive sys/cdefs.h inclusionTheo de Raadt
ok guenther millert kettenis
2012-11-28Including ../../Makefile.inc was loop when npppd/obj is not a symbolic link.YASUOKA Masahiko
Delete Makefile.inc and define BINDIR at npppd/Makefile directly.
2012-11-13Add accept.c from ldpd and use it to handle file descriptor exhaustionYASUOKA Masahiko
in accept() case. "go for it" deraadt
2012-11-13Constify arguments to sendto_nat_t and add missingYASUOKA Masahiko
#include "recvfromto.h" to l2tp_ctrl.c. no binary changes.
2012-09-28framed-ip-address and framed-ip-netmask were not working.YASUOKA Masahiko
pointed out by Andrew Ngo.
2012-09-22gcc2 doesn't like unnamed fields. make this compile on vax again.Marc Espie
"looks right" deraadt@
2012-09-22various fixes; ok yasuokaJason McIntyre
2012-09-21various tweaks;Jason McIntyre
2012-09-20various fixes; ok yasuokaJason McIntyre
2012-09-20Enable npppd and npppctl in default build. Add npppd to rc andYASUOKA Masahiko
install sample configs to /etc/. ok claudio deraadt henning mcbride
2012-09-19tweak man pages.YASUOKA Masahiko
- new sentence, new line - on npppd.8 BUGS section, clarified that what is dropped is L2TP/IPsec packets these must be included the previous commit.
2012-09-19tweak man pages.YASUOKA Masahiko
- add missing copyright - delete comment lines from the template - new sentence, new line - on npppd.8 BUGS section, clarified that what is dropped is L2TP/IPsec packets
2012-09-19cleanup around the pipex. naming style, delete or update comments.YASUOKA Masahiko
no functional changes.
2012-09-19remove files that became unused by new configuration syntax.YASUOKA Masahiko
2012-09-18fix mandoc -Tlint warnings.YASUOKA Masahiko
2012-09-18New configuration syntax for npppd(8). `npppd.conf' will be based onYASUOKA Masahiko
parse.y and `npppd-users' will be based on getcap(3). Add man pages. feedback from giovanni
2012-09-07fix typo and commentYASUOKA Masahiko
from umezawa at iij
2012-07-17use IPsec flowinfo on pipex(4) to select the IPsec tunnel for sendingYASUOKA Masahiko
L2TP packets. ok markus henning
2012-07-16add IP_IPSECFLOWINFO option to sendmsg() and recvmsg(), so npppd(4)Markus Friedl
can use this to select the IPsec tunnel for sending L2TP packets. this fixes Windows (always binding to 1701) and Android clients (negotiating wildcard flows); feedback mpf@ and yasuoka@; ok henning@ and yasuoka@; ok jmc@ for the manpage
2012-07-13npppd used wrong AVPs as a `calling number' because `break' in switchYASUOKA Masahiko
case was missing. ok claudio henning
2012-07-08Increase maximum number of tun interfaces to 8.giovanni
ok yasuoka@
2012-06-05don't use `reigai' that means `exception' in Japanese as labels.YASUOKA Masahiko
no binary change. from Michael W. Bombardieri
2012-05-08Delete rtev* that was to work around routing socket overflows.YASUOKA Masahiko
This was forgotten on the prior commit.
2012-05-08Fix a null reference bug on terminating the process.YASUOKA Masahiko
seems ok henning, ok mcbride
2012-05-08Result-Code AVP of StopCCN was not parsed properly.YASUOKA Masahiko
seems ok henning, ok mcbride
2012-05-08Ignore NAK of authentication protocol option on LCP that was notYASUOKA Masahiko
requested. ok mcbride henning
2012-05-08Fix double free bug in PAP with radius authentication.YASUOKA Masahiko
(found by yus at iij) ok mcbride henning
2012-05-08Ignore ACCM option on LCP. This was required by some LAC that usesYASUOKA Masahiko
the option in proxied LCP. ok mcbride henning
2012-05-08Trivial changes from the upstream(IIJ).YASUOKA Masahiko
- fix styles, compile errors in some ifdef condition and compiler warnings. - delete rtev* that was to work around routing socket overflows. - delete is_ctrl argument from l2tp_ctrl_send_packet(). It's not used. - tweak returning the exit status. - use IPV6_IPSEC_POLICY for IPv6 socket. (though npppd cannot set up a ipsec policy to the socket yet.) ok mcbride henning
2012-05-08Fix comments and styles. Delete unused variables and labels.YASUOKA Masahiko
No binary changes. ok mcbride henning
2012-02-24Correct the spelling of "transferred" and "transferring"Philip Guenthe
from Tobias Ulmer (tobiasu at tmux.org); ok jmc@, krw@
2012-01-23Add handling of `rx connect speed' avp to avoid the bug of xl2tpd.YASUOKA Masahiko
Reported and tested by sebastia@ ok sthen sebastia giovanni
2012-01-23The ingress filter of pipex and npppd become configurable and disabledYASUOKA Masahiko
by default. After this change we need to add ppp.ingress_filter: true to npppd.conf if it is needed. ok sthen
2012-01-18npppdctl related files should be removed. Added a mention about that.YASUOKA Masahiko
2012-01-18Replace npppdctl(8) by new npppctl(8). npppctl was written fromYASUOKA Masahiko
scratch, it uses parser.c derived from ikectl(8) to have OpenBSD's fashion. This includes related changes listed below: - changed npppd control IPC heavyly. - support IPv6 as tunnel source address. - deleted support changing the configuration of npppd_ctl on running. Because it is not so needed but it requires privilege operations. - refactors. man page helps from jmc. tested by sebastia. ok deraadt sebastia sthen
2012-01-18Fix compiler warnings and some styles.YASUOKA Masahiko
ok sebastia sthen
2012-01-06mkdir needs -m to set the modeSebastian Reitenbach
OK yasuoka@
2011-12-24formatting errors, found using freebsd's "igor";Jason McIntyre
2011-10-28use existing _ppp instead of _npppd as a user/group id for npppd.YASUOKA Masahiko
ok deraadt@ henning@
2011-10-15Added "provision for rewound PPP frames" that allows receivingYASUOKA Masahiko
reorder packets to pass to the upper layer without reorder. It will improve performance (throughput or loss rate) for PPTP or L2TP(/IPesc) on networks that latency is unstable such as mobile network. As our test environment (bandwidth: 6Mbps, latency: 50ms for 97% of traffic and 52ms for rest of traffic), throughput has changed from 0.76MB to 2.17MB on file upload by PPTP connected Windows Vista ftp.exe. Developed by UMEZAWA Takeshi at IIJ. ok jmatthew@ tested jmatthew@ and myself.
2011-07-08Include PIPEX in kernel by default. And add new sysctl variableYASUOKA Masahiko
`net.pipex.enable' to enable PIPEX. By default, pipex is disabled and it will not process packets from wire. Update man pages and update HOWTO_PIPEX_NPPPD.txt for testers. discussed with dlg@, ok deraadt@ mcbride@ claudio@
2011-07-08Improved npppd privileged separations:YASUOKA Masahiko
- Changed finalizing way to the privileged process. In old way, the privileged process could not aware abnormal exit of the process in jail. Then the processes in jail remained as zombies. Created a pipe to monitor the privileged process, the privileged process can exit in peace by using the pipe. - npppd will exit abnormally when the privileged process exits abnormally. - PF_KEY socket requires privileges. - Return correct "errno" to the jail in priv_open(). - Cleanup. ok hsuenaga@
2011-07-06I forgot to delete files on my previous commit. sorry.YASUOKA Masahiko
2011-07-06Add RADIUS accounting support and some authentication related changes:YASUOKA Masahiko
- Add functions to radius+.c that are required to implement RADIUS accounting. - Send RADIUS Account-Start and Account-Stop messages with attributes that are defined by RFC 2866, 2868, 2869. - If any authentication realm is deleted from the configuration, npppd may exit by segmentation fault. - Delete radius_common.c, radius_common.h and eap.c because they are not used. - Retransmission and failover are reimplemented. - Cleanup
2011-07-05Fixed some bugs of priv_send(). The bugs caused sending routing messagesYASUOKA Masahiko
failures. 'errno' returned by the privileged process was not initialized. 'tolen' in priv_sendto() was garbage. ok hsuenaga@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-30 13:32:03 +0000